Endpoint Security Engineer

Booz Allen Hamilton•McLean, VA

1d•Remote

About The Position

The Endpoint Security Engineer will implement and maintain endpoint security solutions, including application control, next-generation antivirus, privilege management, and vulnerability remediation. This role will also assist with and enforce policies for device compliance and secure configurations. The engineer will monitor endpoint and client health, investigate incidents, and provide timely resolution. Collaboration with security and infrastructure teams to align endpoint strategy with organizational goals is essential. Documentation of processes, configurations, and standards is required to ensure consistency and audit readiness. Due to the nature of work performed within this facility, U.S. citizenship is required.

Requirements

Experience with Windows, macOS, Mobile, or Linux and scripting languages
Experience building automation workflows with API
Experience with enterprise management tools such as Intune, SCCM, and Jamf Pro
Knowledge of endpoint security practices, including application control, Antivirus and EDR, patching, privilege management, Conditional Access, and vulnerability mitigation
Knowledge of network security fundamentals and integration with endpoint protection
Bachelor’s degree
CISSP, CEH, or CompTIA Security+ Certification
U.S. citizenship is required

Nice To Haves

Experience with Microsoft Entra and Active Directory
Experience with Privilege Management tools such as BeyondTrust
Experience with Application Control tools such as Airlock
Experience with Next-Gen AV, DLP, and EDR such as CrowdStrike or Trellix
Experience patching operating systems and applications
Knowledge of Conditional Access policies and rules
Knowledge of ServiceNow and Microsoft Teams for project management and tracking
Possession of excellent troubleshooting, analytical, and communication skills

Responsibilities

Implement and maintain endpoint security solutions, including application control, next-generation antivirus, privilege management, and vulnerability remediation.
Assist with and enforce policies for device compliance and secure configurations.
Monitor endpoint and client health, investigate incidents, and provide timely resolution.
Collaborate with security and infrastructure teams to align endpoint strategy with organizational goals.
Document processes, configurations, and standards to ensure consistency and audit readiness.