Cyber Security Services - Endpoint Security Admin

Demonstrate a deep understanding of endpoint security generally (EDR, Anti-malware, GTI, etc.) and Trellix Policy orchestrator (ePO) specifically (on-site and cloud based).

• Build, configure, and maintain communication channels between different Cybersecurity technology platforms utilizing industry standards (pxGrid, APIs, SAML, Okta, ODBC, and others).
• Demonstrate intermediate Systems Administrator experience across Microsoft and Linux operating systems.
• Parse raw syslog, packet capture, and other system logging data.
• Understand network subnetting.
• Respond to incident tickets in accordance with established SLAs.
• Collaborate across AORs and business groups regarding endpoint security settings, posture, and troubleshooting.
• Participate in Incident Response activities as needed.
• Author, update, edit, and maintain documentation related to endpoint security posture within Agency.

Bachelor’s degree in Computer Science, Cybersecurity, Information Assurance, or related discipline (or equivalent experience). Must be compliant with DoD 8140 Cyber Workforce Qualification Program; preferred certifications include CompTIA Security+, CISSP, or other relevant cybersecurity certification maintained throughout the employment period. Minimum 3 years’ experience in incident response, cybersecurity operations, or systems administration involving recovery planning, preferably for DoD or federal agencies.

Intermediate Systems Administrator experience configuring, maintaining, and troubleshooting across both Microsoft and Linux operating systems.

• Deep understanding and practical experience with endpoint security tools (EDR, Anti-malware, GTI), with specific expertise in managing Microsoft Defender for both on-site and cloud-based environments.
• Demonstrated ability to build, configure, and maintain communication channels across diverse cybersecurity platforms using industry-standard protocols such as pxGrid, APIs, SAML, Okta, and ODBC.
• Strong capability to parse and analyze raw syslog, packet captures, and system logging data, coupled with a solid understanding of network subnetting for troubleshooting and security posture analysis.
• Hands-on experience deploying, configuring, and maintaining Data Loss Prevention (DLP) tools (including removable media control) and application whitelisting rules for Windows and *NIX environments.
• Experience tracking, maintaining, and reporting on endpoint security compliance to ensure adherence to DoD and Agency requirements (including STIGs, TASKORDs, and CTOs), while navigating change and exception management processes

• Ability to work both independently and as part of a cross-functional cyber response team; may coordinate activities with other analysts. · Exercise sound judgment and report/escalate issues clearly and promptly

• Strong written and verbal communication with ability to document technical activities and procedures, brief government staff, and work with multidisciplinary teams.

Secret clearance required; must be eligible for and able to maintain clearance throughout employment.