Endpoint Security Engineer III

RISA•St. Louis, MO

3d•$101,000 - $111,000•Onsite

About The Position

RISA is hiring a Senior Endpoint Security Engineer to engineer and sustain endpoint security platforms that protect an Intelligence Community customer's enterprise, including Trellix (HBSS), Tanium, and Carbon Black. The engineer will own these platforms from design and configuration through sustainment and work directly with vendors and the customer on enterprise security capabilities. The position is onsite in St. Louis, Missouri, with up to 10% local travel. Active TS/SCI clearance and U.S. citizenship are required to start; the employee must obtain and maintain a Government polygraph after hire. The role is full-time and exempt, with a salary range of $101,000–$111,000. The engineer provides engineering and sustainment support for enterprise endpoint security solutions; designs configurations, directs installations, and establishes system standards; configures and installs security products on Linux; and oversees advanced configuration and sustainment, including policy management, database administration, and security management tools. The role also involves researching and implementing enterprise-wide capabilities with vendors and the customer, recommending appropriately sized hardware and software, supporting secure architecture design and testing, and leading security incident reporting, documentation, investigation, and corrective actions.

Requirements

U.S. citizenship and an active TS/SCI clearance.
Ability to successfully obtain and maintain a Government polygraph after hire.
Bachelor's degree in Engineering, Computer Science, or a related field, plus 10 years of technical experience in cybersecurity; additional experience may be considered in lieu of a degree.
Current DoD 8140.01 / 8570.01-M IAT Level II certification, and CSSP Infrastructure Support certification within 6 months of hire.
Working knowledge of enterprise endpoint security tools, including some or all of HBSS (Trellix), Carbon Black Response/Protection, Microsoft ATA, and Tanium.
Strong working knowledge of administering applications in a Linux environment.
Experience on large-scale enterprise or global networks in a high-paced, diverse environment.
Knowledge of the DoD Architecture Framework and related DoD network architecture and strategic planning instructions.
Experience planning, designing, and evaluating security systems and architectures, and reporting to senior management and customers.

Nice To Haves

CSSP Infrastructure Support certification already in hand.
Linux certifications.
Windows enterprise Active Directory architecture and VMware virtualization.

Responsibilities

Provide engineering and sustainment support for enterprise endpoint security solutions.
Design system configurations, direct installations, and define, document, and enforce system standards.
Configure and install security products on Linux.
Work with vendors and the customer to research, analyze, and implement enterprise-wide security capabilities.
Recommend hardware, software, and implementation approaches sized for present and future capacity.
Assist with the design, analysis, testing, and implementation of secure architectures.
Oversee sustainment and advanced configuration, including policy management, database administration, and security management tools.
Lead security incident reporting, documentation, and investigation, and the corrective measures that follow.