Endpoint Security Engineer/Hybrid Multi-Cloud

About this role

The Asset Security Services (AS^2) team needs 1 resource as stated below.

Portfolio: Cybersecurity Engineering

Program: Asset Security Services

Job Location: Morrisville, NC; Falls Church, VA; Eagan, MN; Washington, DC; Remote

Requested start date: ASAP after gaining positive adjudication of required background clearance; Meet & Greets to be held week of September 14-18, selection to be announced on the 18th.

Title: Endpoint Security Engineer (Hybrid Multi-Cloud)

Number of Resources: 1

PCTS Project # and Name: 127668 – Endpoint Protection Management

Task description and/or any specific requirements:

Position Summary

As an Endpoint Security Engineer, you will design, deploy, and operationalize active, behavior-based endpoint detection and response (EDR/XDR) capabilities across one of the largest private operational fleets in North America. Protecting an enterprise comprising 600,000+ employees and 30,000+ physical sites, you will maintain rigorous security posture across traditional end-user computing (EUC) devices (laptop, desktop, mobile devices & retail terminals), on-premise physical & virtual servers & containerized workloads, and dynamic multi-cloud workloads (AWS, Azure, GCP).

In this role, you will balance proactive protection with business continuity—partnering directly with end-users and application owners to tune policies and eliminate operational friction, while providing tier-3/tier-4 technical escalations to Security Operations Center (SOC) analysts and IT Operations staff during active investigations.

Duties and Responsibilities

Fleet-Wide Behavioral Defense & Control Engineering:

Engineer, deploy, and maintain Next-Gen Antivirus (NGAV) and Endpoint Detection & Response (EDR/XDR) agents (e.g., CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne) across hundreds of thousands of heterogeneous endpoints.

Implement active behavioral protections against zero-day malware, living-off-the-land binaries (LotLBs), ...