Endpoint Security Engineer (Trellix Administrator)

Endpoint Security Engineer (Trellix Administrator)

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Continental US

* * *

Our client is seeking an Endpoint Security Solutions Engineer to join the DGS-X/DMC program located at Langley AFB.

Responsibilities:

• Implement and maintain Trellix products and policies on Windows and Linux clients utilizing ePolicy Orchestrator.

• Monitor security systems, analyze potential threats and vulnerabilities to client systems.

• Maintain Tanium software and utilize dashboards to assist Cyber investigations.

• Experience with Linux operating systems and Windows command line/PowerShell.

• Provide guidance for securing information systems and support cyber vulnerability penetration assessments.

• Provide direct support as a technical representative for ensuring security is integrated throughout the lifecycle of systems.

• Knowledge of common enterprise security devices and tools.

• Experience with SIEM solutions, preferably Elastic Security.

• Create and maintain security incident reports and dashboards.

• Experience using a ticketing system.

• Stay current with emerging threats and vulnerabilities and recommend security improvements.

• Demonstrate knowledge of incident response processes (detection, triage, incident analysis, remediation, and reporting).

• Ensure security testing and evaluations are completed and documented.

• Basic understanding of Microsoft SQL Server.

Qualifications

Required:

• Top Secret/SCI security clearance.
• Bachelor’s degree in IT Technology, Computer Science, or related field with 6+ year's of experience. Degree may be substituted with additional years of experience.
• DOD 8140 (8570) IAT Level II (Security+ or equivalent).
• 2 years of Enterprise Trellix/McAfee administration experience.
• Excellent problem-solving skills and the ability to work effectively in a team, ops-focused environment.
• Capability to perform shift work as part of our 24/7 operations.

Preferred:

• Experience utilizing Tanium for security monitoring.
• AF DCGS experience.
• Knowledge of security best practices and standards, including NIST, ISO, and SOC operations.
• Knowledge of network security and incident response procedures.
• Strong analytical and problem-solving skills.
• Ability to work independently and as part of a team.
• Excellent communication and collaboration skills.

What We Can Offer You:

- We’ve been named a Best Place to Work by the Washington Post.

- Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives.

- We offer competitive benefits and learning and development opportunities.

- We are mission-oriented and ever vigilant in aligning our solutions with the nation’s highest priorities.

- For over 55 years, the principles of CACI’s unique, character-based culture have been the driving force behind our success.

NSIS.INFOTECH

-

______________________________________________________________________________

What You Can Expect:

 

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

 

An environment of trust.

CACI takes pride in fostering a diverse and accessible culture where every individual feels supported to chart their own path. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

 

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

 

Your potential is limitless. So is ours.