Everforth ECS is seeking an Endpoint Engineer III to work remotely.
At ECS Federal, we're driven by a commitment to excellence and innovation in
solving complex challenges. As a premier provider of advanced technology
solutions and services, our mission is to secure and optimize the most critical
commercial, government, defense, and intelligence projects across the country.
Our team is composed of dynamic professionals who thrive in a collaborative and
empowering environment, where our team members leverage the latest technologies
and insights to make a real-world impact. Join us and be part of a
forward-thinking organization that values your expertise and supports your
professional growth.
The Endpoint Engineer III is responsible for supporting the engineering,
implementation, administration, and optimization of enterprise endpoint security
and data protection technologies. This role works closely with the Security
Engineering Manager, security operations teams, enterprise IT teams,
infrastructure teams, and platform owners to ensure endpoint security controls
are effectively deployed, maintained, and integrated across client environments.
The Endpoint Engineer III serves as a senior technical resource for endpoint
security along with supporting the Data Loss Prevention (DLP) program, providing
advanced troubleshooting, platform administration, policy management,
integration support, and technical guidance. The engineer will contribute to the
continuous improvement of endpoint protection, data protection, security
automation, and operational processes that strengthen the organization's overall
cybersecurity posture.
Responsibilities
Endpoint Security Platform Administration: Administer, maintain, configure,
and optimize enterprise endpoint security technologies including EDR/EPP,
endpoint security agents, device controls, host-based security controls, and
related technologies.
DLP Platform Administration: Configure, administer, maintain, and optimize
enterprise Data Loss Prevention and data protection platforms across
endpoint, cloud, email, web, and other supported channels.
Endpoint Security Policy Management: Develop, implement, maintain, and tune
endpoint and data protection security policies and configurations to provide
appropriate protection while minimizing unnecessary operational impact.
Data Protection Engineering: Support the implementation and operation of data
classification, labeling, encryption, device control, and other technical
controls designed to protect sensitive organizational information.
Platform Deployment & Lifecycle Management: Support enterprise deployment,
upgrades, migrations, configuration changes, agent/sensor health, and
lifecycle management of endpoint security and DLP technologies.
Platform Integration: Collaborate with enterprise IT, cloud, identity,
network, infrastructure, and security teams to integrate endpoint security
and data protection technologies with enterprise systems and services.
Advanced Troubleshooting: Serve as a senior escalation point for complex
endpoint security and DLP platform issues, including agent/sensor problems,
policy conflicts, performance issues, integration failures, and unexpected
control behavior.
Security Investigation Support: Provide technical expertise during security
investigations involving endpoint activity, potential data exposure, DLP
policy violations, malware, suspicious activity, and other endpoint security
events.
Policy Tuning & Optimization: Analyze endpoint and DLP platform activity to
identify false positives, policy gaps, configuration issues, and
opportunities to improve security effectiveness and user experience.
Security Automation Support: Develop and maintain scripts, integrations, and
automation workflows to improve endpoint security administration, platform
management, data protection operations, reporting, and response activities.
Operational Monitoring: Monitor the health, deployment status, reliability,
and performance of security tool platforms, agents, sensors, policies,
integrations, and supporting infrastructure.
Technical Leadership: Provide technical guidance and mentorship to other
engineers, assist with complex engineering initiatives, and contribute to
technical decisions related to endpoint security.
Technical Documentation: Develop and maintain engineering documentation,
platform configurations, policy documentation, troubleshooting procedures,
implementation guides, operational runbooks, and knowledge articles.
Continuous Improvement: Identify opportunities to strengthen endpoint
security and data protection coverage, improve platform reliability, optimize
policies and configurations, increase automation, and improve engineering and
operational workflows.
Education Requirements
Bachelor’s degree in computer science, information security, or a related
field. Will consider experience in lieu of a degree.
Salary Range: $130,000-$160,000
General Description of Benefits [https://ecstech.com/careers/benefits]
Qualifications
Experience: Minimum of 5–8 years of cybersecurity or security engineering
experience supporting enterprise security operations environments.
Endpoint Security Experience: Hands-on experience administering and
troubleshooting enterprise endpoint security technologies such as EDR/EPP,
endpoint security agents, host-based security controls, device control, and
related technologies.
Endpoint Security Platform Experience: Experience with enterprise endpoint
security technologies such as Microsoft Defender for Endpoint, CrowdStrike
Falcon, Trellix, or similar platforms.
Data Protection Knowledge: Strong understanding of DLP concepts, sensitive
data identification, data classification and labeling, encryption, device
control, and protection of data at rest, in use, and in transit.
DLP Policy Administration: Experience implementing, testing, troubleshooting,
and tuning DLP policies and rules, including reducing false positives and
evaluating the operational impact of data protection controls.
Enterprise Security Knowledge: Strong understanding of enterprise endpoint
environments, Windows operating systems, identity and access technologies,
networking concepts, cloud services, and security architecture.
Endpoint Troubleshooting: Demonstrated ability to troubleshoot complex
endpoint security issues involving agents, operating systems, policies,
applications, network connectivity, and security platform integrations.
Security Automation: Experience using scripting or automation to support
security engineering, platform administration, troubleshooting, or
operational activities.
Security Framework Knowledge: Familiarity with cybersecurity and data
protection frameworks and standards such as NIST Cybersecurity Framework, CIS
Critical Security Controls, and ISO 27001.
Other Requirements of the position include:
Able and willing to obtain a US Security Clearance.
On-Call Support: Participates in on-call support to assist with security
incident response, operational issues, and investigation activities to
maintain continuous SOC coverage and response capabilities.