Endpoint Security Eng (MDE & Trellix) [$301k/yr+] TS/SCI-FS Poly

• Lead the lifecycle engineering and scale-out architecture of endpoint security solutions, including Microsoft Defender for Endpoint (MDE) and Trellix HX, across hybrid environments (on-premises, cloud, and virtual desktop infrastructures).
• Author complex system engineering and implementation plans.
• Tune agent configurations and exclusion policies to eliminate mission friction.
• Monitor overall endpoint health at scale.
• Collaborate closely with threat hunting and intelligence analysts to translate actionable threat intelligence into custom technical indicators of compromise (IOCs).
• Utilize Kusto Query Language (KQL) and YARA rules for IOC development.
• Act as a primary technical advisor to stakeholders on system risks and engineering considerations.
• Provide advanced forensic support to the Security Operations Center (SOC) during critical high-priority incidents.
• Actively mentor junior and mid-level engineering personnel within the program.
• Key skills include: Systems Engineering, Software Architecture, Technical Team Leadership, Microsoft Azure, Windows internals/drivers, Linux internals/drivers, MacOS, JIRA, Confluence, Model-Based Systems Engineering.

Candidates must already possess an active Top Secret/SCI w/ Full Scope Polygraph to be considered.

We are looking for an Endpoint Security Engineer to architect, deploy, and manage defense-in-depth threat protection solutions across air-gapped networks using Microsoft Defender (MDE), KQL, and Trellix HX.

Qualifications & Compensation:

• Degree: Technical bachelor’s degree or equivalent experience
• Years of experience: 20+ years
• Total Compensation: $301k+ yearly