Endpoint Security Engineer III

ECS is seeking an Endpoint Security Engineer III to work remotely.  

Overview

The Endpoint Security Engineer provides engineering support for endpoint security platforms within a federal energy sector cybersecurity program. This role focuses on managing and optimizing endpoint detection and response (EDR) and endpoint data protection technologies to meet Information Security Continuous Monitoring (ISCM) and DHS Continuous Diagnostics and Mitigation (CDM) requirements. The engineer will ensure endpoint telemetry is reliable, integrated, and aligned to program compliance needs.

Core Capabilities

• Deploy, configure, and maintain endpoint detection and response platforms (e.g., CrowdStrike).
• Manage endpoint data protection technologies, including DLP and device control, to monitor and prevent data exfiltration.
• Ensure endpoint telemetry integrates with SIEM, SOAR, and CDM dashboards.
• Tune endpoint policies and detection logic to balance security, performance, and usability.
• Collaborate with compliance teams to align endpoint security controls with regulatory and CDM requirements.
• Support incident response by validating and improving endpoint detection coverage.
• Document endpoint configurations, baselines, and data flows for audit and compliance purposes.

Salary Range: $125,000 - $152,000

General Description of Benefits

Qualifications

• U.S. Citizenship
• Ability to obtain and maintain a DOE “L” clearance or DoD Secret clearance with reciprocity
• 5+ years of experience in cybersecurity engineering, with at least 3 years focused on endpoint security
• Hands-on experience with enterprise EDR platforms (CrowdStrike preferred)
• Experience integrating endpoint data (EDR, DLP, device control) into SIEM and dashboards
• Scripting skills (PowerShell, Python, or Bash) for endpoint automation and telemetry tuning
• Familiarity with federal cybersecurity standards (FISMA, NIST 800-53, ISCM, CDM Phase 4)