Junior Endpoint Protection Analyst

VIATEQ Corporation•Washington, DC

9d•$90,000 - $120,000•Hybrid

About The Position

VIATEQ Corporation is seeking a Junior Endpoint Protection Analyst to support enterprise cybersecurity operations and IT administrative support services for a federal government client. This role is crucial for the administration, monitoring, and maintenance of enterprise endpoint security controls and protection platforms within a complex federal IT environment. The ideal candidate is an early-career cybersecurity professional with foundational knowledge of endpoint security, security operations, and federal compliance requirements, eager to learn and grow in a dynamic federal IT security setting. This position requires the ability to obtain and maintain a government background investigation, PIV credentials, and all requisite IT access authorizations. Primary work will be performed at the client site in Washington, DC, with approved remote/telework options available.

Requirements

Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field, or equivalent combination of education, experience, or military service.
Minimum of 1–2 years of experience in a cybersecurity, IT operations, or endpoint security support role (including internships or academic projects).
Foundational knowledge of endpoint security concepts (antivirus, anti-malware, EDR, endpoint hardening, patch management, MDM).
Foundational knowledge of Windows operating system administration and security (Active Directory, Group Policy, Windows Event Logs).
Ability to obtain and maintain a government background investigation, PIV credentials, and requisite IT access authorizations.

Nice To Haves

Prior experience supporting endpoint security or cybersecurity operations in a federal government IT contracting environment.
Exposure to Linux or macOS endpoint security administration and hardening.
Familiarity with enterprise vulnerability scanning platforms (Tenable Nessus, Qualys, or equivalent).
CompTIA Security+ certification or active pursuit.
CompTIA A+, CompTIA Network+, or equivalent foundational IT certification.
Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) or Microsoft Certified: Azure Fundamentals (AZ-900) certification.
Familiarity with enterprise EDR platforms (CrowdStrike Falcon, Microsoft Defender for Endpoint, Carbon Black, SentinelOne, or equivalent).
Familiarity with enterprise vulnerability scanning platforms (Tenable Nessus, Qualys, Rapid7 InsightVM, or equivalent).
Basic familiarity with SIEM platforms (Splunk, Microsoft Sentinel, or equivalent).
Familiarity with DISA STIG Viewer or SCAP Compliance Checker tools.
Basic scripting knowledge in PowerShell, Python, or Bash.
Familiarity with ITIL-based IT Service Management concepts and enterprise ITSM platforms (ServiceNow).
Familiarity with the MITRE ATT&CK Framework.
Basic familiarity with cloud security concepts (Microsoft Azure, AWS) related to endpoint protection.
Familiarity with mobile device security and MDM/UEM platform concepts.
Participation in cybersecurity competitions, CTF events, or academic cybersecurity programs.

Responsibilities

Assist in the administration and maintenance of enterprise endpoint protection platforms (EDR, Antivirus, Anti-malware, Host-based Intrusion Detection, Application Control, Device Management).
Support the configuration, deployment, and management of endpoint security agents.
Monitor endpoint protection platform dashboards and consoles for outdated agents, missing policies, protection gaps, or active threats.
Assist in the development and maintenance of endpoint security policies and configurations aligned with security baselines, DISA STIGs, CIS Benchmarks, and client requirements.
Support the management of endpoint protection platform exceptions, exclusions, and whitelists.
Assist in the administration and maintenance of Mobile Device Management (MDM) and Unified Endpoint Management (UEM) platforms.
Generate and distribute endpoint protection platform health and coverage reports.
Monitor endpoint protection platform alerts, EDR telemetry, and security event feeds, triaging and escalating security alerts.
Assist in the investigation of endpoint security alerts, gathering relevant data for triage and escalation.
Support the development and maintenance of endpoint alert triage procedures, escalation playbooks, and response runbooks.
Assist in identifying and documenting false positive alert patterns to refine detection rules.
Monitor endpoint protection platform health and availability, escalating performance issues or service disruptions.
Assist in the execution of endpoint vulnerability scanning activities.
Support the analysis and triage of endpoint vulnerability scan results.
Assist in tracking and reporting on endpoint patch compliance status.
Support coordination with system administrators for timely endpoint patch deployment.
Maintain accurate endpoint vulnerability and patch compliance records.
Assist in the implementation and validation of endpoint hardening standards (DISA STIGs, CIS Benchmarks).
Support configuration compliance scanning activities (SCAP scans).
Assist in tracking and reporting on endpoint configuration compliance status.
Support the development and maintenance of endpoint hardening documentation.
Support cybersecurity incident response activities involving endpoint security events.
Assist in the collection and preservation of endpoint forensic evidence.
Document incident response activities in the program's ITSM platform.
Support post-incident review activities, contributing endpoint security observations.
Assist in maintaining endpoint security compliance documentation.
Support the development and maintenance of endpoint security standard operating procedures and knowledge base articles.
Assist in the preparation of endpoint security status reports and compliance dashboards.
Ensure all endpoint security activities comply with federal regulations and policies (FISMA, NIST SP 800-53, DISA STIGs).
Ensure handling of PII and sensitive data complies with privacy protection requirements.
Actively pursue professional development and skills growth in endpoint security and cybersecurity operations.
Participate in team knowledge sharing sessions and technical training activities.
Stay current with emerging endpoint security threats, vulnerabilities, and federal cybersecurity requirements.