Applications Engineer IV (EDR)

Quevera LLC • Hanover, MD

3d

About The Position

Quevera is seeking an Applications Engineer IV (EDR) to join their team. Quevera offers opportunities to be part of a dynamic, forward-thinking community that fosters innovation, collaboration, and personal growth. Employees will work with industry experts, take on exciting challenges, and have the creative freedom to build cutting-edge solutions, all while advancing their career in a space that values their skills and ideas.

Requirements

• Current TS/SCI Polygraph clearance.
• Proficient in one or more EDR platforms (Trellix HX/EDRF or Microsoft Defender for Endpoint EDR, preferably both).
• Experience with cloud security and familiarity with cloud service providers (AWS or Azure, preferably both).
• Experience securing cloud-hosted workloads using EDR solutions and understanding cloud-native security controls and logging (Microsoft Sentinel, Microsoft Defender, Microsoft Purview, AWS CoudWatch, AWS CloudTrail, AWS GuardDuty, or AWS Security Hub).
• CCSP Certified Cloud Security Professional certification or equivalent.
• Microsoft Certified: Security Operations Analyst Associate (SOAA) or equivalent.
• Understanding of network protocols, traffic analysis, and intrusion detection systems.
• CompTIA Security+ is required.
• In-depth knowledge of Windows operation system internals, registry, and file system.
• Familiarity with forensic tools like EnCase, FTK, or open-source alternatives.
• SANS Windows Forensic Analysis (FOR500) or equivalent.

Nice To Haves

• Proactive identification and investigation of potential security threats and anomalies.
• Experience in managing and responding to security incidents, including containment, eradication, and recovery.
• Familiarity with SIEM systems for log analysis and correlation (e.g. Splunk, Elastic, Microsoft Sentinel).
• Proficient in scripting languages (e.g., PowerShell, Python) for automating tasks and workflows.
• Certified Information Systems Security Professional (CISSP)
• Microsoft 365 Certified: Endpoint Administrator Associate (MD-102)

Responsibilities

• Deploy, configure, test, manage, and optimize endpoint detection and response solutions across the NSA enterprise.
• Establish comprehensive Standard Operating Procedures (SOPs) for EDR functionalities and lead training sessions to empower SOC analysts in maximizing platform efficiency and threat visibility.
• Responsible for the deployment, testing, management, and optimization of endpoint detection and response solutions.
• Deploying, configuring, testing, and monitoring EDR capabilities to traditional on premises and cloud environments.
• Supporting SOC functions such as assisting in monitoring, training analysts, documenting SOPs, incident response coordination, analysis of security events, and process/procedure improvement.

Benefits

• Medical/Dental/Vision (100% Employer Paid Medical Plan)
• Short/Long Term Disability (Employer Paid)
• Life Insurance (Employer Paid)
• Yearly $5,000 towards education/training/certification.
• Employees are in control of their career path through our Career Pathway Program.
• Employer paid Company Vacation Package for you and a guest!
• Quevera will match up to 6% towards your 401K and an additional 4% profit sharing!

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed