Cyber Tools Engineer - ESS

Lockheed Martin•Colorado Springs, CO

1d•Onsite

About The Position

At Lockheed Martin Rotary and Mission Systems, we're pioneering the future of technology and defense. Our mission is to deliver innovative solutions that safeguard our nation and allies. Join us as we redefine what's possible in aerospace and defense. As a Cyber Tools Specialist supporting the Lockheed Martin RMS Command and Control, Battle Management, and Communications (C2BMC) program, you will play a crucial role in enhancing the security posture of critical systems. Your primary responsibilities will include: Design, develop, configure, and maintain security policies, tasks, and deployments for the Trellix Endpoint Security Suite, including ePolicy Orchestrator (ePO), Endpoint Security (ENS) in the NT labs, the C2BMC Testbed (CTB), and Ops. Perform large-scale deployment, upgrades, patching, and optimization of Trellix agents and servers across Windows and Linux environments while ensuring minimal disruption to operations. Develop and maintain comprehensive technical documentation, including standard operating procedures (SOPs), policy guides, STIG compliance reports, and configuration baselines. Troubleshoot complex endpoint security issues, perform root-cause analysis, tune policies to reduce false positives, and implement automated remediation workflows. Support STIG implementation, security audits, and continuous monitoring requirements. Research and evaluate new Trellix features, updates, and best practices; recommend enhancements to strengthen the endpoint security program. Additional tasks include: installing, deploying, and unit testing additional Cyber Products (e.g., Delinea, ESS (Trellix), ACAS, Elastic, BigFix, KMS, etc.). Please Note: This position requires a government security clearance at the Secret level to start; you must be a US Citizen for consideration. This position is located in Colorado Springs, CO and is 100% onsite. Lockheed Martin is a global leader in aerospace, defense, and security solutions. We uphold the highest standards of business ethics and are committed to advancing technology to meet complex challenges worldwide. Joining Lockheed Martin means joining a team of dedicated professionals driven by integrity and innovation. We are looking for an Sr. Cyber Tools Specialist with a background in Cyber Engineering and ESS who thrives in a dynamic, collaborative environment. You will possess: Hands-on experience administering and engineering Trellix (or legacy McAfee/HBSS) Endpoint Security solutions in medium-to-large enterprise environments Demonstrated ability to develop and tune security policies, automate tasks via scripting, and create technical documentation for operational use and compliance. Strong understanding of Agile principles and practices. Proficiency in Linux or Windows operating systems, including installation and configuration. Excellent communication skills and ability to collaborate effectively with cross-functional teams and stakeholders. Join Lockheed Martin and embark on a rewarding career where your skills and expertise will be valued and developed. You’ll have the opportunity to work on cutting-edge technologies that make a difference in national security. Enjoy competitive benefits, career growth opportunities, and a supportive work environment that encourages innovation and excellence. If you’re ready to contribute to the future of aerospace and defense, apply today and experience your future with Lockheed Martin. Learn more about Lockheed Martin's Comprehensive benefits package here! At Lockheed Martin, we use our passion for purposeful innovation to help keep people safe and solve the world's most complex challenges. Our people are some of the greatest minds in the industry and truly make Lockheed Martin a great place to work. With our employees as our priority, we provide diverse career opportunities designed to propel, develop, and boost agility. Our flexible schedules, competitive pay, and comprehensive benefits enable our employees to live a healthy, fulfilling life at and outside of work. We place an emphasis on empowering our employees by fostering an inclusive environment built upon integrity and corporate responsibility. If this sounds like a culture you connect with, you’re invited to apply for this role. Or, if you are unsure whether your experience aligns with the requirements of this position, we encourage you to search on Lockheed Martin Jobs , and apply for roles that align with your qualifications. By applying to this job, you are expressing interest in this position and could be considered for other career opportunities where similar skills and requirements have been identified as a match. Should this match be identified you may be contacted for this and future openings. The work associated with this position will be performed onsite at a designated Lockheed Martin facility. Lockheed Martin supports a variety of alternate work schedules that provide additional flexibility to our employees. Schedules range from standard 40 hours over a five day work week while others may be condensed. These condensed schedules provide employees with additional time away from the office and are in addition to our Paid Time off benefits.

Requirements

Generally has 3+ years of related experience and may have a post-secondary degree or training in a related discipline.
3 years of hands-on experience specifically administering and engineering Trellix (or legacy McAfee/HBSS) Endpoint Security solutions.
Proven experience deploying, configuring, and maintaining Trellix ePO, Endpoint Security (ENS), and related components (e.g., Application Control, DLP, Threat Intelligence) in medium-to-large enterprise environments.
Demonstrated ability to develop and tune security policies, automate tasks via scripting, and create technical documentation for operational use and compliance.
Strong background in Windows Server and client administration; working knowledge of Linux endpoint management.
This position requires a government security clearance at the Secret level to start; you must be a US Citizen for consideration.

Nice To Haves

Bachelor’s degree in Computer Science, Engineering, or related technical field, or equivalent experience.
Experience supporting endpoint security in DoD, federal government, or similarly regulated environments, including STIG compliance and security baseline management, is highly desired.
Deep expertise in Trellix ePO administration, policy creation, extensions, and reporting.
Strong working knowledge of Trellix Endpoint Security (ENS), firewall, exploit prevention, and adaptive threat protection features.
Solid understanding of endpoint security concepts, threat hunting basics, malware analysis, and zero-trust principles.
Excellent technical writing and documentation skills with the ability to produce clear SOPs, and compliance artifacts.
Strong analytical and troubleshooting skills for complex endpoint issues.
Ability to work independently and collaboratively in a team environment while managing multiple priorities.
Effective communication skills to explain technical concepts to both technical and non-technical stakeholders.

Responsibilities

Design, develop, configure, and maintain security policies, tasks, and deployments for the Trellix Endpoint Security Suite, including ePolicy Orchestrator (ePO), Endpoint Security (ENS) in the NT labs, the C2BMC Testbed (CTB), and Ops.
Perform large-scale deployment, upgrades, patching, and optimization of Trellix agents and servers across Windows and Linux environments while ensuring minimal disruption to operations.
Develop and maintain comprehensive technical documentation, including standard operating procedures (SOPs), policy guides, STIG compliance reports, and configuration baselines.
Troubleshoot complex endpoint security issues, perform root-cause analysis, tune policies to reduce false positives, and implement automated remediation workflows.
Support STIG implementation, security audits, and continuous monitoring requirements.
Research and evaluate new Trellix features, updates, and best practices; recommend enhancements to strengthen the endpoint security program.
installing, deploying, and unit testing additional Cyber Products (e.g., Delinea, ESS (Trellix), ACAS, Elastic, BigFix, KMS, etc.)