Cybersecurity Tools Administrator

Description

SAICisseekinga motivated
Cybersecurity Tools Administrator
to join our
MAJESTIC Joint Program Office (JPO) Team
in support ofan on-premises enterprise IT environment. This role focuses on implementing, administering, and optimizing cybersecurity toolsetscentered on
Trellix
Endpoint Security (ENS) and integrated capabilities such as Endpoint Detection & Response (EDR), Network Detection & Response (NDR), and malware protection. The administrator will manage policy, deployment, health/compliance, telemetry, and integrations with SIEM/SOAR to strengthen enterprise security posture.

All work is performed
on-site
in Springfield, VA.

• Administer Trellixe Policy Orchestrator  (ePO): configure policies, tasks, and client assignments; perform agent deployment/updates;monitor health and compliance across Windows/Linux endpoints.
• Implement andmaintaincybersecurity toolsets including ESS/ENS, EDR, NDR, and malware protection; tune detections and containment to reduce false positives while improving fidelity.
• Integrate endpoint tools with enterprise SIEM/SOAR (e.g., Splunk) and vulnerability management stacks (e.g., Nessus/ACAS) to enable unified visibility, correlation, and automated response.
• Develop andmaintaindashboards, reports, and KPIs for endpoint coverage, policy compliance, threat activity, and vulnerability remediation progress.
• Conduct enterprise-wide agent posture checks; remediate orphaned agents, stale policies, connectivity issues, and broken update channels.
• Author andmaintainstandard operating procedures (SOPs), change records, and implementation plans; follow standardized test, certification, and deployment procedures.
• Support incident response by providing endpoint forensics, containment actions (e.g., DAC), isolation, and IOC sweep capability;assist with root-cause analysis and corrective actions.
• Coordinate with Systems Administrators, Network Engineers, and Cybersecurity personnel to assess risks,validate configurations, and enforce security controls in accordance withRMF/NIST 800-53.
• Ensure tool and control configuration compliance; review change requests;validate effectiveness of security controls across virtualized Windows/Linux servers and enterprise networks.

• Maintain detailed documentation including release notes, configuration baselines, incident investigations, and compliance/authorization artifacts.

• Bachelors degree in related field and 2-9+ years of experience OR;
• Masters degree in related field and 0-7+ years of experience OR;
• High School diploma or equivalent and 6-13+ years of experience.

• Candidates must satisfy
  Cybersecurity Workforce Framework (CWF) (Cyber Defense Infrastructure Support Specialist, Intermediate Level) requirements, as outlined by Navy COOL. This requirement can be met bypossessingone or more of the following qualifying certifications:
• Certified Ethical Hacker (CEH).
• CompTIA Cloud+.
• CompTIA Cybersecurity Analyst (CySA+).
• CompTIA Pen Test+.
• CompTIA Security+.
• GIAC Continuous Monitoring Certification (GMON).
• GIAC Response and Industrial Defense (GRID).
• GIAC Security Essentials Certification (GSEC).
• Systems Security Certified Practitioner (SSCP).

ORThis requirement can be met through:

• A Bachelor’s Degree
  in Cybersecurity, Computer Science, IT, or a related field.

• 2-5 years
  of experience administering enterprise cybersecurity tools (e.g., Trellix ePO/ENS, EDR/NDR) and performing endpoint/security operations in an enterprise IT environment.

• Proficiency administering
  
  TrellixePOand ENS/ESS; familiarity with Dynamic Application Containment (DAC), IOC sweep, and endpoint isolation.
• Understanding of cybersecurity frameworks and processes (NIST 800-53, RMF, ICD 503).
• Solid knowledge of…