Sr. Host Based Security System (HBSS) - Endpoint Security Services (ESS) Administrator (Info. Systems & Cyber Security, Sr. Associate)

Summary

The MIL Corporation is looking for aSr. Host Based Security System (HBSS)- Endpoint Security Services (ESS) Administrator (Info. Systems & Cyber Security, Sr. Associate)to support the administration of Endpoint Security Services. This role supports a Federal Government client in Norfolk, VA.

This position currently requires a hybrid schedule with 4 days on-site. Schedule is subject to change based on company/contract requirements.

Responsibilities

• Perform actions with ePO dependencies such as Microsoft (MS) Structured Query Language (SQL) Server 2022 and Apache
• Administer the HBSS operations for Enterprise computing systems to include the various HBSS modules such Trellix Agent (TA), Data Exchange Layer (DXL), Endpoint Security (ENS), Data Loss Prevention (DLP), Policy Auditor (PA), Rogue System Detection (RSD), Trellix Application and Change Control (TACC), and Threat Intelligence Exchange (TIE)
• Assist in integrating HBSS with the information systems of Commander, Navy Installations Command (CNIC) Navy regions and tenant organizations
• Assist CNIC and their customers with deployment, tuning, and configuration of HBSS modules and policies
• Validate and coordinate all HBSS scheduled maintenance
• Create custom Firewall policies and work with Information Systems Security Manager (ISSM) and Information System Security Officers (ISSOs) to identify signatures to protect against zero-day threat
• Create firewall exclusions based on customer demand and the Assessment and Authorization (A&A) process
• Troubleshoot virtual machine (VM) and SQL issues that conflict with the basic functionality of ePO
• Create ePO queries and reports to collect various deployment statistics as required
• Monitor, evaluate and coordinate customer compliance with U.S. Cyber Command (USCYBEROM) orders and directives
• Assist in preparation for security inspections and support other DoD initiatives related to HBSS
• Coordinate with the ISSM and ISSOs regarding malicious events detected via HBSS and update incident reports as needed with supplementary HBSS data

Travel

Up to 10% of the time, to CONUS sites as required.

Required Qualifications

• 10+ years of relevant experience with HBSS
• Extensive knowledge of ePO server task and query implementations used to automate various HBSS faucets such as endpoint module deployments and compliance
• Extensive knowledge of the US Navy Vulnerability Remediation Asset Manager (VRAM)
• Deep understanding of configuring and managing Data eXchange Layer (DXL)
• Trellix Application Change Control (TACC) integration, sustainment, and policy development experience
• ENS Firewall and Threat Protection policy management and module sustainment experience
• 2-4 years of SQL hands-on experience
• Basic Windows/Linux system admin experience
• Experience executing and interpreting DISA related STIGS for McAfee/Trellix products and familiarity with ESS OPORD
• DoD 8570.01 Level 2 Certification (e.g., Security+), or higher
• Experience with scripting and automation of McAfee ePO and Agent capabilities such as PowerShell and McAfee ePO Endpoint Deployment Kit
• Have extensive knowledge of Endpoint Security Services (ESS)
• Have extensive knowledge of Microsoft Defender for Identity (MDI)

Desired Qualifications

• Master's degree in a technical discipline from an accredited college
• Experience with McAfee/Trellix Native encryption
• Experience with McAfee Package Designer
• Working knowledge of Microsoft Defender for Endpoint (MDE)
• IAT III Certification
• Endpoint Security Solutions (ESS) Administrator 201 ePO 5.10
• Endpoint Security Solutions (ESS) Advanced Administrator 301 ePO 5.10
• Endpoint Security Solutions (ESS) Analyst 501 ePO 5.10

Education

Bachelor's Degree in a technical discipline from an accredited college. A high school diploma and six (6) years of work experience related to the position or an Associate's Degree in a technical discipline from an accredited college plus four (4) years of additional work experience related to the position may be substituted for a Bachelor's Degree.

Clearance

All applicants for this position must possess a Secretclearance; please note that the clearance process takes into account financial background aspect