Trellix/MDE Systems Engineer 3
About The Position
The Senior Systems Engineer (Level 3) serves as a principal technical leader and subject matter expert within the National Security Agency’s Enterprise Endpoint Detection and Response (EDR) Program. Operating in a highly classified, multi-domain infrastructure, the successful candidate will drive the strategic architectural design, end-to-end integration, deployment, and optimization of premier endpoint security platforms, specifically Microsoft Defender for Endpoint (MDE) and Trellix HX. This critical role bridges high-level systems architecture with operational defense capabilities, ensuring total endpoint visibility, robust threat containment, and resilient configuration management across all enterprise and mission-critical assets to defend national security infrastructure against sophisticated cyber threats.
Requirements
- Twenty (20) years experience as a SE in programs and contracts of similar scope, type and complexity is required.
- Demonstrated experience in planning and leading Systems Engineering efforts is required.
- Active and current TS.SCI w FSP through MD
- Compliance with DoD 8570/8140 IAM Level II or III baseline certifications
- Proven engineering experience with MDE architecture, deployment strategies via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL).
- Demonstrated experience engineering, deploying, and managing Trellix HX (formerly FireEye) controllers and agents within air-gapped or highly restricted networks, including the creation of OpenIOC and YARA rules.
- In-depth technical understanding of Windows, Linux, and macOS internals, including file systems, registry structures, and process execution mechanics.
Responsibilities
- Leading the lifecycle engineering and scale-out architecture of MDE and Trellix HX across hybrid environments, including on-premises, cloud, and virtual desktop infrastructures (VDI).
- Authoring complex system engineering and implementation plans.
- Tuning agent configurations and exclusion policies to eliminate mission friction.
- Monitoring overall endpoint health at scale.
- Collaborating closely with threat hunting and intelligence analysts to translate actionable threat intelligence into custom technical indicators of compromise (IOCs), utilizing Kusto Query Language (KQL) and YARA rules.
- Acting as a primary technical advisor to Government stakeholders on system risks and engineering considerations.
- Providing advanced forensic support to the SOC during critical high-priority incidents.
- Actively mentoring junior and mid-level engineering personnel within the program.
Benefits
- competitive pay and benefits
- opportunities to learn and grow
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
