Junior Endpoint Protection Analyst - Washington DC

VetJobs•Washington, DC

11d•$90,000 - $120,000•Hybrid

About The Position

VIATEQ Corporation is seeking a Junior Endpoint Protection Analyst to support enterprise cybersecurity operations and IT administrative support services for a federal government client in Washington, DC. This role is crucial for assisting in the administration, monitoring, and maintenance of enterprise endpoint security controls and protection platforms within a complex federal IT environment. The ideal candidate is an early-career cybersecurity professional with foundational knowledge of endpoint security, security operations, and Federal cybersecurity compliance, eager to learn and grow under the guidance of senior security personnel. The position requires the ability to obtain and maintain a government background investigation, PIV credentials, and necessary IT access authorizations.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field, or equivalent combination of education, experience, or military service.
Minimum of 1–2 years of experience in a cybersecurity, IT operations, or endpoint security support role (including internships or academic projects).
Foundational knowledge of endpoint security concepts (antivirus, anti-malware, EDR, hardening, patch management, MDM).
Foundational knowledge of Windows operating system administration and security (Active Directory, Group Policy, Windows Security Center, Event Logs).
Ability to obtain and maintain a government background investigation, PIV credentials, and all requisite IT access authorizations.

Nice To Haves

Prior experience supporting endpoint security or cybersecurity operations in a federal government IT contracting environment.
Exposure to Linux or macOS endpoint security administration and hardening.
Familiarity with enterprise vulnerability scanning platforms (Tenable Nessus, Qualys, or equivalent).
CompTIA Security+ certification or active pursuit.
CompTIA A+, CompTIA Network+, or equivalent foundational IT certification.
Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) or Microsoft Certified: Azure Fundamentals (AZ-900) certification.
Familiarity with enterprise EDR platforms (CrowdStrike Falcon, Microsoft Defender for Endpoint, Carbon Black, SentinelOne, or equivalent).
Familiarity with enterprise vulnerability scanning platforms (Tenable Nessus, Qualys, Rapid7 InsightVM, or equivalent).
Basic familiarity with SIEM platforms (Splunk, Microsoft Sentinel, or equivalent).
Familiarity with DISA STIG Viewer or SCAP Compliance Checker tools.
Basic scripting knowledge in PowerShell, Python, or Bash.
Familiarity with ITIL-based IT Service Management concepts and enterprise ITSM platforms (ServiceNow).
Familiarity with the MITRE ATT&CK framework.
Basic familiarity with cloud security concepts (Microsoft Azure, AWS).
Familiarity with mobile device security and MDM/UEM platform concepts.
Participation in cybersecurity competitions, Capture the Flag (CTF) events, or academic cybersecurity programs.

Responsibilities

Assist in the administration and maintenance of enterprise endpoint protection platforms (EDR, antivirus, anti-malware, host-based intrusion detection, application control, device management).
Support the configuration, deployment, and management of endpoint security agents.
Monitor endpoint protection platform dashboards for issues like outdated agents, protection gaps, or active threats.
Assist in developing and maintaining endpoint security policies aligned with security baselines, DISA STIGs, CIS Benchmarks, and client requirements.
Support the management of endpoint protection platform exceptions, ensuring proper documentation and approval.
Assist in the administration and maintenance of Mobile Device Management (MDM) and Unified Endpoint Management (UEM) platforms.
Generate and distribute endpoint protection platform health and coverage reports.
Monitor endpoint protection platform alerts, EDR telemetry, and security event feeds, triaging and escalating security incidents.
Assist in investigating endpoint security alerts by gathering relevant data.
Support the development and maintenance of endpoint alert triage procedures and response runbooks.
Assist in identifying and documenting false positive alert patterns to refine detection rules.
Monitor endpoint protection platform health and availability, escalating performance issues or service disruptions.
Assist in executing endpoint vulnerability scanning activities.
Support the analysis and triage of endpoint vulnerability scan results.
Assist in tracking and reporting on endpoint patch compliance status.
Support coordination with system administrators for timely endpoint patch deployment.
Maintain accurate endpoint vulnerability and patch compliance records.
Assist in the implementation and validation of endpoint hardening standards (DISA STIGs, CIS Benchmarks).
Support configuration compliance scanning activities (SCAP scans).
Assist in tracking and reporting on endpoint configuration compliance status.
Support the development and maintenance of endpoint hardening documentation.
Support cybersecurity incident response activities involving endpoint security events.
Assist in the collection and preservation of endpoint forensic evidence.
Document incident response activities accurately in the ITSM platform.
Support post-incident review activities.
Assist in maintaining endpoint security compliance documentation.
Support the development and maintenance of endpoint security standard operating procedures and knowledge base articles.
Assist in the preparation of endpoint security status reports and metrics summaries.
Ensure all endpoint security activities comply with Federal regulations and client policies (FISMA, NIST SP 800-53, DISA STIGs).
Ensure handling of PII and CUI complies with privacy protection requirements.
Actively pursue professional development in endpoint security and cybersecurity operations.
Participate in team knowledge sharing sessions and technical training.
Stay current with emerging endpoint security threats and Federal cybersecurity requirements.