4 hours ago
Washington, DC, USASenior
Base Salary
$138k - $166k/yr
Responsibilities
- Monitor and manage enterprise Trellix security platforms, including ePO, ENS, EDR, DLP, and encryption technologies.
- Tune SOC alerts, improve detection capabilities, and investigate endpoint security events.
- Remediate JCIP and compliance findings through application whitelisting, File Integrity Monitoring, DLP enhancements, and security-control implementations.
- Design and deploy endpoint hardening and application-control solutions using Trellix Application and Change Control (Solidcore).
- Develop and maintain DLP policies, encryption controls, removable-media protections, and data-classification safeguards.
- Integrate endpoint-security telemetry with SIEM and SOAR platforms to improve visibility, detection, and automated response.
- Perform root-cause analysis of security incidents, policy conflicts, and endpoint-management issues.
- Develop automation workflows and operational efficiencies using scripts, APIs, and orchestration tools.
- Create dashboards, reports, and metrics for cybersecurity operations and executive reporting.
- Document security architectures, SOPs, playbooks, and engineering standards while researching emerging threats and recommending security improvements.
Requirements
- Active TS/SCI security clearance is required.
- Seven years of engineering experience and five years administering Trellix security solutions in a large enterprise environment are required.
- Hands-on experience with Trellix ePolicy Orchestrator, Endpoint Security, Endpoint Detection and Response, Data Loss Prevention, Drive Encryption, Threat Intelligence Exchange, Data Exchange Layer, Policy Auditor, Rogue System Detection, Trellix Security for Microsoft Exchange, Application and Change Control, and File Integrity Monitoring is required.
- Experience implementing application whitelisting, endpoint hardening, encryption, data protection technologies, and integrations with SIEM, SOAR, threat intelligence, and identity-management solutions is required.
- Strong understanding of endpoint-security architecture, cyber-threat detection, incident response, and risk-management principles is required.
- Experience developing DLP policies, device-control mechanisms, and data-exfiltration prevention controls is required.
- Experience supporting SOCs and enhancing 24x7 threat monitoring and response capabilities is required.
- Ability to develop security-engineering standards, SOPs, playbooks, and operational procedures is required.
- Experience supporting compliance initiatives and implementing controls aligned with federal cybersecurity frameworks and regulations is required.
- Strong analytical, troubleshooting, and root-cause analysis skills are required.
Benefits
- Health, dental, and vision insurance.
- 401(k) retirement plan with company match.
- Paid time off and holidays.
- Parental leave and dependent care.
- Flexible work arrangements.
- Professional development opportunities, including company-paid training and/or certifications.
- Employee assistance and wellness programs.
- Potential performance-based bonuses, referral bonuses, and other additional incentives.
- Applications are accepted on a rolling basis until the position is filled.
Categories
About MetroStar
MetroStar provides IT services and software solutions to U.S. federal civilian and defense agencies, focusing on digital transformation, AI/ML, application modernization, enterprise IT, and human-centered design. The company operates on government contracts to deliver secure systems and mission-support applications. Founded in 1999 and headquartered in Reston, Virginia, MetroStar is privately held and a portfolio company of Veritas Capital.