Booz Allen Hamilton is seeking an Endpoint Security Engineer to design, implement, and sustain endpoint protection across the enterprise. This onsite role in McLean, VA centers on deploying controls such as application control, next-generation antivirus, privilege management, and vulnerability remediation, while monitoring health, investigating incidents, and coordinating with security and infrastructure teams to align endpoint efforts with broader goals. U.S. citizenship is required due to facility requirements.
Responsibilities
- Implement and maintain endpoint security solutions, including application control, next-generation antivirus, privilege management, and vulnerability remediation.
- Assist with and enforce policies for device compliance and secure configurations.
- Monitor endpoint and client health, investigate incidents, and provide timely resolution.
- Collaborate with security and infrastructure teams to align endpoint strategy with organizational goals.
- Document processes, configurations, and standards to ensure consistency and audit readiness.
Citizenship eligibility
U.S. citizenship is required due to facility requirements.
Requirements
- Experience with Windows, macOS, Mobile, or Linux and scripting languages
- Experience building automation workflows with API
- Experience with enterprise management tools such as Intune, SCCM, and Jamf Pro
- Knowledge of endpoint security practices, including application control, antivirus and EDR, patching, privilege management, Conditional Access, and vulnerability mitigation
- Knowledge of network security fundamentals and integration with endpoint protection
- Bachelor’s degree
- CISSP, CEH, or CompTIA Security+ Certification
Technologies
- Intune
- SCCM
- Jamf Pro
- Microsoft Entra
- Active Directory
- BeyondTrust
- Airlock
- CrowdStrike
- Trellix
- ServiceNow
- Microsoft Teams
- Windows
- macOS
- Mobile
- Linux
- API
Benefits
- Health benefits
- Life benefits
- Disability benefits
- Financial benefits
- Retirement benefits
- Paid leave
- Professional development
- Tuition assistance
- Work-life programs
- Dependent care
Nice to have
- Experience with Microsoft Entra and Active Directory
- Experience with Privilege Management tools such as BeyondTrust
- Experience with Application Control tools such as Airlock
- Experience with Next-Gen AV, DLP, and EDR such as CrowdStrike or Trellix
- Experience patching operating systems and applications
- Knowledge of Conditional Access policies and rules
- Knowledge of ServiceNow and Microsoft Teams for project management and tracking
- Excellent troubleshooting, analytical, and communication skills
Identity verification
As part of the hiring process, you may be asked to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You may be required to be on camera during interviews and assessments, and Booz Allen reserves the right to capture your image to verify identity and prevent fraud.
Candidate AI Usage Policy
AI is a component of our daily work at Booz Allen, and responsible use of AI tools is encouraged. However, use of artificial intelligence or other tools to assist with responses during interviews (in-person or virtual) is prohibited unless explicit permission is provided.
Work model
- Onsite: Work will primarily be performed at a Booz Allen office or customer facility, with collaboration conducted in person as required by the role.
Compensation
The projected compensation range for this role is $69,400 to $158,000 annually (USD). Salary is determined by factors such as location, education, experience, skills, and contract-specific considerations, and may include additional components of Booz Allen's total compensation package.
Commitment to non-discrimination
All qualified applicants will receive consideration for employment without regard to disability, protected veteran status, or other statuses prohibited by law at the federal, state, local, or international level.
