Security Engineer – Endpoint Security Tool Monitoring

Description

Looking for an opportunity to make an impact?

At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainable. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.

If this sounds like a mission you want to be a part of, keep reading!

Leidos is seeking experienced Security Engineers – Endpoint Security Tool Monitoring to support the Defense Manpower Data Center (DMDC) CyberPRIMES program. Leidos is a major partner on the contract and will provide a substantial portion of the cybersecurity workforce supporting the Defense Human Resources Activity (DHRA) and DMDC. The Security Engineer will support enterprise endpoint-security monitoring by validating that endpoint security tools are properly configured, reporting required data, and integrating with enterprise cybersecurity monitoring and reporting capabilities.

This position will identify coverage and configuration gaps, troubleshoot endpoint-security issues, and develop recommendations that improve data collection, alerting, and threat response.

DMDC supports the Defense Human Resources Activity within the Office of the Under Secretary of Defense for Personnel and Readiness (OUSD(P&R)) and maintains the Department of Defense’s largest and most comprehensive central repository of personnel, manpower, casualty, pay, entitlement, personnel security, identity, readiness, training, and related data.

The DHRA Information Technology (IT) environment includes approximately 15,000 network and endpoint devices supporting more than 600 Government-Off-The-Shelf (GOTS) applications and approximately 100 Risk Management Framework (RMF) authorization boundaries managed through the Enterprise Mission Assurance Support Service (eMASS). Endpoint-security capabilities provide a critical source of cybersecurity visibility across this environment. The Security Engineer will help ensure endpoint tools are deployed, configured, communicating, and providing reliable security data to the enterprise systems used for continuous monitoring, compliance reporting, and threat response.

• Support comprehensive cybersecurity monitoring and oversight of endpoint-security capabilities across the DHRA enterprise.
• Validate that endpoint-security tools are properly deployed, configured, operational, and reporting required data.
• Verify upstream rollup of endpoint-security data into applicable enterprise cybersecurity monitoring and reporting systems.
• Validate endpoint-security reporting through the Defense Information Systems Agency Continuous Monitoring and Risk Scoring (DISA CMRS) capability, as applicable.
• Maintain weekly records of endpoint-security data-rollup validation, coverage, configuration status, and identified deficiencies.
• Identify and document systems or environments that are incorrectly configured, not reporting, or providing incomplete endpoint-security data.
• Escalate endpoint-security configuration, connectivity, coverage, and reporting issues for corrective action.
• Develop recommendations to optimize endpoint-security configurations to improve data collection, alert generation, visibility, and threat response.
• Provide technically supported configuration recommendations to Government tool administrators for implementation.
• Support network and server security scanning and validation activities associated with endpoint-security monitoring.
• Perform compliance checks and cross-reference endpoint-security results against applicable Department of…