Endpoint Security Engineer III

CEC’s Transport & Cybersecurity Services (TCS) team is seeking a TS/SCI cleared Endpoint Security Engineer to support an NGA GEOINT mission in an onsite environment. The position focuses on engineering and sustainment activities for endpoint security capabilities, incident handling, and secure architecture implementation.

Key Responsibilities

• Implement and apply technologies, processes, and practices to protect networks, devices, programs, and data from malicious attack, damage, or unauthorized access.
• Provide engineering and sustainment support for Carbon Black Endpoint Detection and Response (EDR).
• Establish computing environments by designing system configuration, directing system installation, and defining, documenting, and enforcing system standards.
• Provide detailed guidance for hardware and software selection, implementation techniques, and tools to support business needs, including present and future capacity requirements.
• Configure and install security products utilizing Linux OS.
• Partner with software vendors and customers to research, analyze, and implement enterprise-wide security solutions, capabilities, and enhancements aligned to mission goals.
• Assist with design, analysis, testing, and implementation of secure architectures.
• Oversee security infrastructure sustainment, maintenance, and advanced configuration, including policy management and database administration and security management tools.
• Oversee reporting, documentation, and investigation of security incidents, and lead development and implementation of corrective measures.

Required Qualifications

• Active TS/SCI clearance. Post-hire requirement: successfully pass and maintain a government polygraph.
• Bachelor’s degree in Engineering, Computer Science, or a related field. Additional experience may be considered in lieu of a degree.
• Minimum 5 years of technical experience in Cyber Security.
• DoD 8570 IAT Level II certification (current).
• Obtain CSSP Infrastructure Support certification within 6 months of hire date.
• Working knowledge of maintaining Enterprise Cyber Security Engineering requirements using Carbon Black Endpoint Detection and Response (EDR).
• Knowledge and experience with incident response and threat hunting solutions.
• Strong hands-on experience administering applications in a Linux environment.
• Experience working with large-scale enterprise or global networks in a high-paced, diverse environment.
• Understanding of the DoD Architecture Framework and other key DoD network architecture and strategic planning instructions.
• Experience providing status reports and products to senior management and customers.
• Experience developing plans, designs, and evaluations of security systems and architectures.

Preferred / Additional Desired Background

• CSSP Infrastructure Support certification.
• Windows Enterprise Active Directory (AD) architecture and VMWare virtualization.
• Strong hands-on working knowledge within an AWS environment.

Technologies and Tools

• Carbon Black Endpoint Detection and Response (EDR)
• Linux OS and Linux environment
• DoD 8570 IAT Level II
• CSSP Infrastructure Support
• DoD Architecture Framework
• DoD network architecture

Location, Schedule, and Travel

• Location: St. Louis, MO (onsite). (CACI also lists Springfield, VA as an option for this opportunity.)
• Employee type: Regular
• Time type: Full time
• Minimum clearance to start: TS/SCI
• Travel: Up to 10% (local)

Compensation

The proposed salary range for this position is $75,200 to $158,100 per year.

Benefits

• Comprehensive benefits including healthcare, wellness, financial benefits, retirement, family support, continuing education, and time off benefits.
• Flexible time off benefit.
• Access to robust learning resources.