Senior Endpoint Security Systems Engineer

DirectViz Solutions (DVS) is a dynamic and rapidly growing government contractor committed to delivering innovative IT solutions that address the mission-critical needs of our government clients. Through the expertise and dedication of our talented team, we provide cutting-edge technology services designed to achieve success and exceed expectations.

At DVS, we prioritize our employees as our greatest asset. We offer competitive compensation, comprehensive medical benefits, a 401(k) match, generous PTO accrual, professional development reimbursement, corporate-funded

Endpoint Security Systems Engineer - Cyber Security Specialist - Senior

Location: Adelphi, MD (Hybrid - 3 days on site) Security Clearance: Active Top Secret / SCI (TS/SCI) Program: C5ISR Center Cyber Security Service Provider (CSSP) Schedule: Full Time / Day Shift

We are seeking a Senior Endpoint Security Systems Engineer to serve as an endpoint protection and architecture specialist. In this role, the candidate will lead the engineering, deployment, configuration, optimization, and sustainment of enterprise host-based defense capabilities across mission assets. Focus will center on managing and advancing our enterprise Trellix environment (ePolicy Orchestrator and Endpoint Security suite), while engineering and operationalizing Elastic Defend for Endpoint as a complementary host-based telemetry and detection capability within our multi-tiered defense architecture. Will partner closely with mission system owners, infrastructure architects, and defensive cyber operations teams to protect mission-critical Windows, Linux, and macOS platforms. While the CSSP defends a hybrid landscape of SaaS and PaaS offerings, specific endpoint agent engineering, deployment, and management focus will target systems residing in on-premises environments and cloud Infrastructure-as-a-Service (IaaS).

Key Responsibilities

Domain

Engineering & Operational Duties

Console Administration

Maintain, upgrade, and harden central endpoint management consoles (primarily Trellix ePO) across multi-tier networks, isolated enclaves, and cloud-connected management VPCs.

Multi-Tiered Endpoint Architecture

Engineer, deploy, and sustain the Trellix suite alongside Elastic Agent / Elastic Defend, establishing cohesive agent lifecycle management, mutual compatibility, and synchronized host-level protection.

Endpoint Environment Integration

Direct the integration, configuration, and agent lifecycle management for endpoints and servers specifically residing within on-premises environments and cloud IaaS instances covering Windows, Linux, and macOS.

Policy & Performance Tuning

Design, benchmark, and deploy scan exclusion policies, behavioral rules, DLP rules, and content updates to ensure host protection without degrading OS stability, server throughput, or cloud compute performance.

Troubleshooting & Liaison

Resolve complex system-level issues, including: • Diagnosing and remediating agent connectivity, registration, and communication failures across hybrid network boundaries. • Debugging product installation and deployment failures on mission hosts. • Partnering with mission owners to engineer precise performance exclusions and resolve mission-critical application blocks caused by security policies. • Investigating and rectifying ePO console misconfigurations, policy inheritance errors, or corrupt database events impacting the wider enterprise.

Compliance & Risk Alignment

Maintain compliance with DISA STIGs, OPORD, and endpoint security requirements across all supported host deployments (on-premises and IaaS), leveraging host reporting to support continuous monitoring frameworks.

Threat Detection Support

Collaborate with CSSP threat detection and hunt teams to implement custom endpoint signatures, indicators of compromise (IOCs), and automated containment policies.

Basic Qualifications

• Clearance: Active Top Secret / SCI (U.S. Citizenship required). Secret active to start.


• Education & Experience:
  
  
  
  • Bachelor's degree in Cybersecurity, Computer Science, STEM, or an IT-related field with 8+ years of relevant systems engineering/endpoint security experience.
  
  
  • Master's degree with 6+ years of relevant systems engineering/endpoint security experience
  
  
  
  


• DoD 8140 compliance upon start: Active certification meeting CSSP-Infrastructure Support, CSSP-Analyst, or IAT Level II/III requirements (e.g., CEH, CySA+, GCIH, GCFA, GMON, CISSP, CASP+, or CISM).


• Primary Technology Expertise:
  
  
  
  • Demonstrated hands-on engineering experience administering and upgrading Trellix ePolicy Orchestrator (ePO), Trellix Agent, and the following core modules:
    
    
    
    • Trellix Endpoint Security (ENS) suite (specifically Threat Prevention and Firewall)
    
    
    • Trellix Data Loss Prevention (DLP)
    
    
    • Trellix Policy Auditor
    
    
    
    
  
  
  • Proven experience deploying and maintaining endpoint security agents across enterprise Linux (RHEL/CentOS/Rocky), Windows (Server & Desktop), and macOS environments.
  
  
  
  


• Target Environment Engineering:
  
  
  
  • Practical experience managing and troubleshooting host-based security capabilities specifically across on-premises environments and cloud-based IaaS (VM) instances.
  
  
  • Strong troubleshooting capability in analyzing OS performance impacts, resource contention, and agent-server communication issues across complex network routing topologies.
  
  
  
  

Preferred Qualifications

• Application Whitelisting & Integrity: Experience implementing and managing Trellix Solidcore (Application Control) for application whitelisting and file integrity monitoring (FIM).


• Complementary Detection Technologies: Practical experience deploying, configuring, and policy-tuning Elastic Agent and Elastic Defend for Endpoint within an enterprise environment.


• macOS Enterprise Management: Familiarity with macOS-specific security configurations, payload profiles, and enterprise deployment mechanisms (e.g., Apple MDM, JAMF Pro) for security agents.


• DISA Enterprise Systems: Experience integrating, validating, or reporting endpoint security posture data into DISA COAMS (Cybersecurity Operational Attribute Management System) and CMRS (Continuous Monitoring and Risk Scoring).


• Cloud Infrastructure: Familiarity with cloud networking, auto-scaling groups, and security group behaviors within AWS, Microsoft Azure, or Google Cloud Platform (GCP) as they apply to IaaS host security.


• Automation & Scripting: Practical scripting ability (PowerShell, Bash, or Python) to automate agent installation, verification, policy audits, and health monitoring.


• Framework Familiarity: Working understanding of the MITRE ATT&CK enterprise framework and its application to host-based behavioral detections.

If you thrive on solving complex problems and building meaningful connections, we'd love to hear from you. Join our team and make an impact today!


Physical and Mental Qualifications:

• Maintain focus and awareness throughout scheduled working hours.


• Perform tasks requiring prolonged periods of sitting or standing at a desk, utilizing a computer, mouse, and keyboard.


• Lift and move objects weighing up to 15 pounds as needed.


• Exhibit excellent verbal and written communication skills, with a strong command of the English language.


• Demonstrate the ability to work independently while also collaborating effectively as part of a team.


• Quickly learn and retain routine tasks and processes.


• Possess strong organizational skills, attention to detail, business correspondence proficiency, and self-management capabilities.


• Perform the essential functions of the role satisfactorily; reasonable accommodation will be provided for employees with disabilities upon request.


• Accept and adapt to additional responsibilities or changes to assigned duties as determined by DirectViz Solutions (DVS).

DirectViz Solutions, LLC (DVS) is an equal opportunity employer who prohibits discrimination and harassment against any employee or applicant for employment based on race, , sex (including pregnancy), age, gender identity, creed, religion, national origin, sexual orientation, marital status, genetic information, disability, political affiliation, protected veteran status, or any other status protected by federal, state or local law.


DVS has a zero-tolerance policy for harassment, threats, coercion, discrimination, and intimidation. Employees may file a complaint or exercise any right protected by Executive Order 11246, Section 503 of the Rehabilitation Act of 1973, as amended, Section 4212 of the Vietnam Era Veterans Readjustment Assistance Act of 1974, or the Veterans Employment Opportunities Act of 1998.

Apply now

How would you like to verify your identity?

Continue with phoneVerify with a one-time text code

Continue with emailVerify with a one-time code

Powered by isolved Applicant Tracking

• 
  
  Sign Up For Job Alerts!
  
  


• 
  
  
  Name
  
  You must type a name.
  
  Email
  
  You must type a valid email.
  
  Location (city, state or zip code)
  
  
  
  You must select a location.
  
  Accept Terms of Service
  I agree to the terms of service and privacy policy.
  
  You must accept the terms of service and privacy policy.
  
  Send Me Jobs
  
  
  Would you like Refer.io to send you similar jobs from other employers?
  
  
  Yes, daily!
  
  
  
  
  Yes, weekly!
  
  
  
  
  No, thanks.
  
  
  Please type the job title you are interested in:
  
  
  
  Job title
  
  You must type a job title.
  
  We'll send some jobs to you in the next 30 minutes. If you don't see them, check your spam folder.
  
  Next
  
  
  Resume Input
  
  
  Select file
  Resume File
  
  
  
  You must select a file.
  
  
  
  Upload Resume
  upload later
  
  
  
  
  Thank you for subscribing to receive job alerts.
  
  You should start receiving emails in the next week.
  
  Your file is uploading. Please wait a few seconds.
  
  Enter your phone number if you'd like to receive job alerts for in via text message.
  
  
  
  Phone number
  
  You must type a phone number.
  
  Please indicate if you agree to Refer.io's Subscriber Communication Policy.
  
  
  
  Please indicate if you agree to Refer.io's Subscriber Communication Policy.
  Select an option
  Yes, I agree to be contacted by text messages
  No, I do not agree to receive text messages
  
  You must agree to our Subscriber Communication Policy in order to receive text messages from Refer.io.
  
  Yes, why not?
  
  
  
  
  Not now
  
  
  Refer.io can assist in your job search. Please answer the following questions to amplify your search results.
  
  
  
  Education status
  Education status
  In School
  Graduated
  Never Attended
  Partially completed
  
  You must select an education status answer.
  
  Work status
  Work status
  Currently employed
  Out of work
  Temporary job
  
  You must select a work status answer.
  
  Job search status
  Job search status
  Actively looking for a job
  Passively looking for a job
  Not looking for a job
  
  You must select a job search status answer.
  
  Seeking for
  Employment goal
  Similar Job to What I Do Now
  Progress to a Higher Job in the Same Field
  Jump to a New Field of Work
  
  You must select a seeking status answer.
  
  Job type
  Job type
  Full Time
  Part Time
  From Home
  
  You must select a job type answer.
  
  Next
  
  
  powered by
  Refer.io
  Refer.io
  
  
  

• 
  Resources
  


• 
  
  • Contact Us

Follow Us On Social Media





Share This Job







Maintained by isolved People Cloud - © 2026



Refresh


Search the FAQ here


Go
Common Job Questions



<__parameter=job_type>Full Time