HBSS/ESS Cyber Engineer (Trellix ePO)

BAE Systems•Norfolk, VA

6d•$105,254 - $178,931

About The Position

BAE Systems is seeking a highly skilled DISA Endpoint Security Solution (ESS) support professional to serve as a subject matter expert (SME) in Trellix ePolicy Orchestrator (ePO) and related technologies. The successful candidate will be responsible for administering ESS operations for enterprise computing systems, assisting with integration and deployment, and providing technical expertise to CNIC and their customers. Key Responsibilities: Technical Expertise: Serve as a SME in Trellix (McAfee) ePO server, Host Intrusion Prevention System (HIPS), VirusScan Enterprise (VSE), Endpoint Security (ENS), Trellix Application/Change Control, Rogue System Detection (RSD), USAF Asset Compliance Configuration Module (ACCM), and ePO dependencies such as Microsoft (MS) Structured Query Language (SQL) ESS (HBSS) Administration: Administer the ESS operations for Enterprise computing systems, including deployment, tuning, and configuration of ESS modules and policies. Integration and Deployment: Assist in integrating ESS with Information Systems (ISs) of CNIC, Navy regions, and tenant organizations. Customer Support: Assist CNIC and their customers with deployment, tuning, and configuration of HBSS modules and policies. Maintenance and Validation: Validate and coordinate all ESS scheduled maintenance. Firewall Policy Creation: Create custom Firewall policies and work with Information Systems Security Manager (ISSM) and Information System Security Officers (ISSOs) to identify, configure, and apply HIPS signatures to protect against zero-day threats. Troubleshooting: Troubleshoot VM and SQL issues that conflict with the basic functionality of ePO. Reporting and Querying: Create ePO queries and reports to collect various deployment statistics as required. Scripting and Automation: Experience with scripting and automation of ESS ePO and Agent capabilities such as PowerShell and ESS ePO Endpoint Deployment Kit. Compliance and Status Monitoring: Evaluate and coordinate customer compliance with U.S. Cyber Command (USCYBEROM) orders and directives. Security Inspections and Initiatives: Assist in preparation for security inspections and support other DoD initiatives related to ESS. Incident Response: Coordinate with the ISSM and ISSOs regarding malicious events detected via ESS and update incident reports as needed with supplementary ESS data.

Requirements

Bachelor's degree in Information Technology, Information Assurance, Cybersecurity or related field and at least 5 years of experience in ESS/HBSS support or a related field (4 additional years of experience may be substituted for the degree)
Knowledge of: Trellix (McAfee) ePO, Host Intrusion Prevention System (HIPS), VirusScan Enterprise (VSE), Endpoint Security (ENS), McAfee Application/Change Control, Rogue System Detection (RSD), USAF Asset Compliance Configuration Module (ACCM), Microsoft (MS) Structured Query Language (SQL) Server, PowerShell and McAfee ePO Endpoint Deployment Kit
Trellix ESS (McAfee HBSS) Administrator certification
Compliant with DoD Cyber Workforce Framework (DCWF), DoD Directive 8140.01 This may include CompTIA Security+, GIAC Security Essentials (GSEC), or ISC2 Systems Security Certificate Practitioner (SSCP), etc.

Nice To Haves

Master's degree in Information Technology, Information Assurance, Cybersecurity or related field and at least 8 years of related experience
Senior cybersecurity certifications such as ISC2 Certified Information Systems Security Professional (CISSP), ISC2 CISSP-Architecture, ISACA Certified Information Security Manager (CISM), ISC2 Certified Authorization Professional (CAP), EC-Council Certified Chief Information Security Officer (C|CISO), ISACA Certification in Risk and Information Systems Control (CRISC), ISACA Certified Information Systems Auditor (CISA).

Responsibilities

Administer ESS operations for enterprise computing systems
Assist with integration and deployment
Provide technical expertise to CNIC and their customers
Serve as a SME in Trellix (McAfee) ePO server, Host Intrusion Prevention System (HIPS), VirusScan Enterprise (VSE), Endpoint Security (ENS), Trellix Application/Change Control, Rogue System Detection (RSD), USAF Asset Compliance Configuration Module (ACCM), and ePO dependencies such as Microsoft (MS) Structured Query Language (SQL)
Administer the ESS operations for Enterprise computing systems, including deployment, tuning, and configuration of ESS modules and policies
Assist in integrating ESS with Information Systems (ISs) of CNIC, Navy regions, and tenant organizations
Assist CNIC and their customers with deployment, tuning, and configuration of HBSS modules and policies
Validate and coordinate all ESS scheduled maintenance
Create custom Firewall policies and work with Information Systems Security Manager (ISSM) and Information System Security Officers (ISSOs) to identify, configure, and apply HIPS signatures to protect against zero-day threats
Troubleshoot VM and SQL issues that conflict with the basic functionality of ePO
Create ePO queries and reports to collect various deployment statistics as required
Experience with scripting and automation of ESS ePO and Agent capabilities such as PowerShell and ESS ePO Endpoint Deployment Kit
Evaluate and coordinate customer compliance with U.S. Cyber Command (USCYBEROM) orders and directives
Assist in preparation for security inspections and support other DoD initiatives related to ESS
Coordinate with the ISSM and ISSOs regarding malicious events detected via ESS and update incident reports as needed with supplementary ESS data

Benefits

health, dental, and vision insurance
health savings accounts
a 401(k) savings plan
disability coverage
life and accident insurance
employee assistance program
a legal plan
discounts on things like home, auto, and pet insurance
paid time off
paid holidays
paid parental, military, bereavement, and any applicable federal and state sick leave
company recognition program to receive monetary or non-monetary recognition awards
Other incentives may be available based on position level and/or job specifics.