Endpoint Security Engineer

RISA is seeking a Senior Endpoint Security Engineer to engineer and sustain enterprise endpoint security platforms for an Intelligence Community customer. In this onsite role in St. Louis, MO, you will design, configure, install, and maintain endpoint security capabilities using tools such as Trellix (HBSS), Tanium, and Carbon Black.

The position also emphasizes operational readiness through sustainment, policy management, incident reporting, and follow-on corrective actions. You will collaborate with vendors and the customer to research, analyze, and implement enterprise-wide improvements and to help shape secure architectures aligned with DoD guidance.

What you’ll do

• Provide engineering and sustainment support for enterprise endpoint security solutions.
• Design endpoint security configurations, perform direct installations, and define, document, and enforce system standards.
• Configure and install security products on Linux.
• Partner with vendors and the customer to research, analyze, and implement enterprise-wide security capabilities.
• Recommend hardware, software, and implementation approaches sized for current and future capacity.
• Support the design, analysis, testing, and implementation of secure architectures.
• Oversee sustainment and advanced configuration, including policy management, database administration, and security management tools.
• Lead reporting, documentation, and investigation of security incidents, including corrective measures.

What you bring

• U.S. citizenship and an active TS/SCI.
• Ability to obtain and maintain a Government polygraph after hire.
• Bachelor’s degree in Engineering, Computer Science, or a related field, plus 10 years of technical experience in cybersecurity (additional experience may be considered in lieu of a degree).
• Current DoD 8140.01 / 8570.01-M IAT Level II certification, and CSSP Infrastructure Support within 6 months of hire.
• Working knowledge of enterprise endpoint security tools, including HBSS (Trellix), Carbon Black Response/Protection, Microsoft ATA, and Tanium (all or some).
• Strong working knowledge of administering applications in a Linux environment.
• Experience on large-scale enterprise or global networks in a high-paced, diverse environment.
• Experience aligned to DoD Architecture Framework and related DoD network architecture and strategic planning instructions.
• Experience planning, designing, and evaluating security systems and architectures, including reporting to senior management and customers.

Tools and technologies

• Trellix (HBSS)
• Tanium
• Carbon Black Response/Protection
• Microsoft ATA
• Linux
• DoD Architecture Framework

Benefits and work details

• Medical, dental, and vision insurance
• 401(k) and Roth
• Paid Time Off
• 11 paid Federal Holidays

• Location: St. Louis, MO (onsite)
• Employment type: Full time, Exempt
• Clearance required to start: Active TS/SCI (U.S. citizenship required)
• Travel: Up to 10% (local)
• Salary range: $101,000 – $111,000 per year

Nice to have

• CSSP Infrastructure Support certification already in hand
• Linux certifications
• Windows enterprise Active Directory architecture and VMware virtualization