SITEC - Cyber Endpoint Security Systems Engineer - MacDill AFB

Peraton•Tampa, FL

1d•$86,000 - $138,000•Onsite

About The Position

Peraton is hiring a Cyber Endpoint Security Systems Engineer to support the Special Operation Command Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance Task Order. The position is located at MacDill AFB in Florida. SITEC 3 EOM provides operations and maintenance services to USSOCOM, its Component Commands, Theater Special Operations Commands, and deployed forces, including network operations, systems and network infrastructure, end-user and common-device support, configuration and asset management, training, and IMAC services. The engineer is responsible for technical architecture, detection engineering, automated integration, platform modernization, and attack surface reduction across enterprise endpoint ecosystems. The role engineers and scales endpoint security platform infrastructure, develops detection-as-code capabilities, designs modern API integrations, and builds automated containment workflows to strengthen defensive posture while minimizing operational overhead.

Requirements

At least 12 years of experience with a high school diploma, 10 years with an AS/AA degree, or 8 years with a BS/BA degree.
DoW TS/SCI clearance.
Security+ certification.
DoW 8140 compliance under Work Role Code 462 – Control Systems Security Specialist, Intermediate level or higher.

Nice To Haves

Endpoint security platform management.
Threat detection and analysis.
Security automation and scripting.
SIEM integration and optimization.
Cloud security principles.
Network and system fundamentals.
Compliance and security frameworks.
Problem solving and troubleshooting.
Technical documentation.
Continuous learning and adaptability.

Responsibilities

Architect, test, and deploy resilient, high-availability enterprise endpoint security platform topologies, including clustered databases and load-balanced Agent Handlers in DMZs and segmented cloud environments.
Lead modernization initiatives, including re-architecting legacy on-premises endpoint security infrastructure.
Design and test migration paths for legacy point products.
Engineer multi-platform agent compatibility across enterprise operating systems, microservices, containerized workloads, and non-persistent VDI environments.
Develop platform sizing, compute and storage scalability models, network bandwidth throttles, and disaster recovery architectures for endpoint security management systems.
Develop, test, and deploy custom behavioral detection rules mapped to the MITRE ATT&CK framework to identify adversary tradecraft, persistence mechanisms, and lateral movement.
Engineer host-level attack surface reduction baselines, including WDAC, Trellix Application Control/Solidcore, Credential Guard, Exploit Guard, and Linux kernel security modules such as SELinux and AppArmor.
Establish and govern the policy lifecycle for exclusions, behavioral suppression rules, and tamper-protection configurations before handing off operational execution to administrators.
Design endpoint telemetry streaming pipelines to route endpoint events into SIEM and data lake environments in collaboration with the Cyber Analytics Systems Engineer.
Operationalize threat intelligence indicators and hunt findings from the Cyber Threat Hunter into durable detection signatures and automated containment triggers.
Serve as the Tier 3 engineering escalation tier for OS compatibility bugs, kernel panic and BSOD triage, memory leaks, and complex defensive-agent driver interaction issues.
Author engineering specifications, platform migration guides, detection-as-code CI/CD pipelines, and operational runbooks for transition to the Cyber Endpoint Security Systems Administrator.