OneZero is seeking a talented Endpoint Detection and Response Solutions Engineer to join our team in supporting a federal customer within the Department of Homeland Security (USCG). We are an employee-centric company that truly appreciates our team members and their value to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and fostering teams that are and continue to be technically proficient and technically capable across a comprehensive range of cyber mission areas. OneZero full-time employees receive an extremely competitive benefits package that includes health/dental/vision/life insurance plans, 401K with company matching, PTO and paid holidays, employee referral program, and educational assistance. Additional details can be found on our website at:https://www.onezerollc.com/careers/

Title:

Endpoint Detection and Response Solutions Engineer

Location:Alexandria, VA

Clearance:Secret

Responsibilities:

The Endpoint Detection and Response Solutions Engineer (EDRSE) Sr. will assist in the consultation, development, deployment, sustainment, and optimization of the client's existing and new EDR technologies and supporting infrastructure. Specific responsibilities include:

Conducting research of new and emerging threats and the technologies and system enhancements needed ensure sustained security posture of the client's enterprise networks.

Planning and directing system engineering, integration, and deployment efforts.

Providing SME-level consultation services to the client, as well as providing training and oversight to junior team members.

Developing test and evaluation plans for new technologies and enhancements to existing services and providing oversight in their execution.

Troubleshooting and restoration of system services in the event of an unexpected outage or critical failure, including performance of root-cause analyses and remediation plan creation and execution.

Conducting a continual assessment of system configuration against the current threat landscape to ensure adequate security posture of all supported EDR services.

Requirements:

Possess an Active DOD Secret or higher security clearance.

Possess a baseline DOD CSWF IAT II qualifying certification along with a secondary proficiency certification as prescribed in DOD 8570.01M.

The following certifications are highly desirable: Tanium Certified Operator (TCO), Tanium Certified Administrator (TCA), Tanium Certified Professional Endpoint Management (TCPEM)

3+ years' experience in the development, integration, and management of common industry EDR tools such as CrowdStrike, CarbonBlack, Microsoft Defender, Sentinel, ACAS, Elastic, Splunk, etc.

4+ years' experience in the design and engineering of standard operating system environments such as Microsoft Server, Windows 10/11, Linux etc.

Familiarity with DOD STIG requirements and system hardening

Python and PowerShell scripting experience is a plus.

Excellent written and oral communication skills, with the ability to work independently or as a member of a team