Endpoint Security Engineer

Halvik Corp

Halvik Corp delivers a wide range of services to 13 executive agencies and 15 independent agencies. Halvik is a highly successful WOB business with more than 50 prime contracts and 500+ professionals delivering Digital Services, Advanced Analytics, Artificial Intelligence/Machine Learning, Cyber Security and Cutting-Edge Technology across the US Government. Be a part of something special!

The Sentinel One Endpoint Security Engineer is responsible for the administration, management, and optimization of the organization's endpoint security environment, with a primary focus on Sentinel One Endpoint Protection Platform (EPP) and Endpoint Detection and Response (EDR). This role works closely with Cybersecurity Operations teams to protect enterprise Windows endpoints from malware, ransomware, and advanced cyber threats while ensuring compliance with organizational security standards.

This role is on site Monday through Friday in Alexandria, VA.

The position is responsible for deploying and maintaining Sentinel One agents, managing endpoint security policies, investigating security alerts, and supporting incident response activities. Additionally, the engineer will leverage Microsoft Intune to administer endpoint security configurations and support the organization's transition from traditional endpoint management solutions to modern cloud-based management.

The ideal candidate possesses strong experience in enterprise endpoint security, Windows administration, Power Shell automation, and security tool integration. This role also requires expertise in developing automated workflows through APIs and integrating endpoint security solutions with SIEM and SOAR platforms such as Microsoft Sentinel, Splunk, IBM QRadar, and Cortex XSOAR.

• Strategic Execution: Lead the strategic implementation and optimization of Sentinel One EPP/EDR capabilities to strengthen the organization's endpoint security posture and align with cybersecurity objectives. Drive the adoption of modern endpoint management practices through Microsoft Intune, supporting the transition from traditional on-premises management to cloud-based solutions. Develop and execute endpoint security roadmaps, ensuring compliance with security standards, regulatory requirements, and industry best practices.
  
  Enhance operational efficiency through Power Shell automation, API integrations, and SIEM/SOAR orchestration to improve threat detection, response, and reporting capabilities. Collaborate with cybersecurity, infrastructure, and operations teams to proactively identify risks, implement security controls, and support continuous security improvement initiatives.
• Operational Oversight: Oversee daily operations of the Sentinel One EPP/EDR platform, ensuring continuous endpoint protection, policy compliance, and operational effectiveness across the enterprise. Monitor security alerts, investigate threats, and coordinate incident response activities to rapidly detect, contain, and remediate endpoint security risks. Manage endpoint security configurations and deployments through Microsoft Intune, ensuring consistent enforcement of security policies and compliance standards. Collaborate with cybersecurity and IT teams to maintain a secure, resilient, and well-governed endpoint environment while driving continuous operational improvements.
• Collaboration: Partner with Cybersecurity Operations, Infrastructure, and IT support teams to strengthen endpoint security, streamline incident response, and ensure effective threat mitigation across the enterprise. Collaborate with stakeholders to implement and maintain security policies, compliance standards, and endpoint protection strategies using Sentinel One and Microsoft Intune. Work closely with security analysts, engineers, and administrators to integrate endpoint security solutions with SIEM/SOAR platforms and enhance security automation capabilities.
  
  Engage with business and technical teams to support endpoint management initiatives, drive continuous improvement, and promote security best practices throughout the organization.
• Technical Performance: Demonstrate technical expertise in administering and optimizing the Sentinel One EPP/EDR platform to provide effective threat detection, prevention, and response capabilities across enterprise endpoints. Manage the deployment, configuration, and maintenance of Sentinel One agents and endpoint security policies to ensure consistent protection, compliance, and operational stability. Utilize Microsoft Intune, Power Shell scripting, and automation solutions to enhance endpoint management, streamline security operations, and improve reporting accuracy.
  
  Leverage Sentinel One APIs and SIEM/SOAR integrations to automate security workflows, accelerate incident response, and strengthen overall endpoint security posture. Apply advanced troubleshooting and analytical skills to resolve endpoint security, malware, ransomware, and Windows operating system…