Cyber Engineer – Endpoint Security (R0174787) - IRES (SSFB)

Innovim-Defense-Services,-LLC; Colorado Springs (CO); Presencial; USD 140.000 - 170.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Comprehensive nationwide Medical/Dent/

Descripción de la vacante

INNOVIM is seeking a Cyber Engineer – Endpoint Security to join our Missile Defense Division in a DoW Top Secret environment. This role focuses on engineering, sustaining, and modernizing endpoint-security capabilities for mission systems and stakeholders.

The position requires extensive experience, DoW 8570.01-M IAT Level II certification, and an active Top Secret clearance with SCI eligibility. Location is Schriever Space Force Base, CO, with day shifts and on-site work.

Formación

• 8+ years of general full-time work experience.
• 6+ years of directly related cybersecurity experience.
• 2+ years in a management or leadership role.
• Active DoW Top Secret clearance with SCI eligibility.
• Experience with enterprise endpoint-security tools in regulated environments.
• Familiarity with Trellix, Elastic, ArcSight, ACAS and related tools.
• IAT Level II certificate or higher.

Responsabilidades

• Administer, configure, and sustain endpoint-security tools and services.
• Support Elastic Defend configuration, policy management, and health.
• Investigate and resolve endpoint-security issues with system owners.
• Develop and maintain endpoint-security engineering documentation and SOPs.
• Coordinate with cyber compliance and vulnerability teams.
• Collaborate with ISSMs, network engineers, and system admins.
• Provide backup and surge support to Systems Engineering.

Conocimientos

Cybersecurity

Endpoint security

Elastic Defend

Documentation

Leadership

System administration

Risk management

RMF

Collaboration

Compliance

Educación

DoW 8570.01-M IAT Level II certification

Herramientas

Elastic Defend

Elastic Stack (ELK)

Trellix ePO

ACAS

HBSS

ArcSight

Linux

Prisma Cloud

Descripción del empleo

Job Details

Posting Details

• Posted on November 9, 2026

Locations

Showing 1 location

IDS Colorado Colorado Springs, CO 809153628, USA

• On-site
• Travel Required : Yes
• IRES
• Full-Time
• Requisition #: CYBER002820

Description

INNOVIM is seeking a Cyber Engineer – Endpoint Security to be part of our Missile Defense Division and directly supports the Missile Defense Agency (MDA).

Location: Schriever Space Force Base, Colorado Springs, CO

Relocation Assistance: None available at this time

Remote/Telework: NO - Not available for this position

Clearance Type: DoW Top Secret w/ SCI Eligibility

Shift: Day Shift

We are seeking a highly motivated, independent, and results-oriented Cyber Engineer – Endpoint Security to support the MDSEA Cyber Team. The ideal candidate thrives in a dynamic and challenging mission environment; takes ownership of endpoint-security engineering, administration, and sustainment activities; and can effectively balance daily operational requirements with modernization efforts.

This position is the primary endpoint-security engineering role supporting Elastic Defend. The selected candidate will work closely with cybersecurity, systems engineering, infrastructure, and mission stakeholders to administer, troubleshoot, document, and improve endpoint security capabilities.

The successful candidate will be a collaborative technical contributor with strong analytical and critical-thinking skills. In addition to primary endpoint-security responsibilities, the individual may provide limited backup, surge, and project support to the Systems Engineering team for enterprise Elastic engineering efforts as mission priorities require.

If you are passionate about leveraging your cybersecurity expertise to defend Department of War (DoW) networks and enhance our nation’s security, consider this position.

Responsibilities:

Your primary focus will be endpoint-security engineering, operational sustainment, and modernization.

Duties will include:

Endpoint Security Engineering and Sustainment:

• Administer, configure, maintain, troubleshoot, and sustain endpoint-security tools and services in support of mission systems and DoW cybersecurity requirements.

Elastic Defend Support:

• Support endpoint-security operations using Elastic Defend, including configuration, policy management, agent deployment and health, alerting, troubleshooting, logging, reporting, and coordination with system owners and administrators.

Endpoint Security Operations:

• Investigate and resolve endpoint-security tool issues; support endpoint policy management, agent deployment and health, alerting, logging, reporting, and coordination with affected system owners and administrators.

Technical Documentation:

• Develop and maintain endpoint-security engineering documentation, Standard Operating Procedures (SOPs), configuration baselines, implementation plans, troubleshooting guides, and sustainment artifacts.

Vulnerability and Compliance Support:

• Coordinate with Cyber compliance, vulnerability-management, and system-administration personnel to support implementation of applicable cybersecurity requirements, directives, remediation actions, and continuous-monitoring activities.

Cross-Functional Collaboration:

• Work with Cyber team leads, Information System Security Managers (ISSMs), system administrators, network engineers, and Systems Engineering personnel to ensure endpoint-security capabilities support mission, operational, and security requirements.

Systems Engineering Support:

• Provide backup, surge, and project-based support to the Systems Engineering team for enterprise Elastic engineering efforts, as mission priorities require.
• Support may include technical coordination, configuration assistance, troubleshooting, documentation, integration activities, and designated implementation projects.
• Be able to develop clear technical documentation and communicate effectively with cybersecurity personnel, system administrators, engineers, management, and mission stakeholders.

Basic Requirements:

• Must have 8, or more, years of general (full-time) work experience which may be reduced with completion of advanced education
• Must have 6, or more, years of directly related experience
• Must have 2, or more, years of experience working in a management or leadership role
• Must have a current DoW 8570.01-M IAT Level II certification, such as CompTIA Security+.
• Must have experience administering, configuring, troubleshooting, deploying, or sustaining enterprise endpoint-security tools in a DoW or similarly regulated environment.
• Must have experience with cybersecurity processes, procedures, and tools used for endpoint protection, vulnerability management, monitoring, logging, or data correlation, such as Trellix ESS/ePO, ACAS, Elastic, ArcSight, or comparable technologies.
• Must have an active DoW Top Secret Security Clearance with SCI eligibility.

Desired Requirements:

• Have experience deploying, configuring, and using Elastic Kibana visualization dashboards to support cybersecurity monitoring, analysis, reporting, and operational awareness.
• Have experience using and configuring Elastic Cloud features, including X-Pack capabilities such as security, alerting, monitoring, reporting, and role-based access controls.
• Have experience developing, configuring, and customizing Elastic/ELK Stack components—including Elasticsearch, Logstash, and Kibana to support enterprise monitoring, log aggregation, visualization, alerting, and cybersecurity operations.
• Have hands-on experience with Elastic Defend, Elastic Security, Elastic Stack, Elastic Cloud Enterprise, or comparable enterprise security information and event-management or endpoint-detection-and-response capabilities.
• Have experience supporting Prisma Cloud and container-security capabilities, including container and image vulnerability management, compliance monitoring, runtime protection, alerting, troubleshooting, and integration with enterprise cybersecurity monitoring processes.
• Have a basic working knowledge of Linux operating systems, including command-line navigation, file and directory management, permissions, process and service monitoring, log review, package management, and basic troubleshooting.
• Have experience with Trellix Endpoint Security Suite, Trellix ePolicy Orchestrator (ePO), Host-Based Security System (HBSS), or comparable endpoint-security management platforms.
• Have experience supporting a cybersecurity-tool migration, endpoint-security platform transition, agent migration, policy conversion, testing, validation, or operational rollout.
• Have familiarity with DoW cybersecurity operations, vulnerability management, DISA Cyber Tasking Orders (CTOs), Information Assurance Vulnerability Alerts (IAVAs), Security Technical Implementation Guides (STIGs), and continuous-monitoring activities.
• Have familiarity with Risk Management Framework (RMF) processes, NIST SP 800-53 controls, security documentation, and Authority to Operate (ATO) sustainment activities.
• Have 1, or more, advanced certifications: CompTIA CySA+, CASP+, CISSP, GIAC certifications, or other advanced DoW 8570-aligned certifications.
• Have experience supporting enterprise engineering teams through technical integration, logging and telemetry onboarding, troubleshooting, implementation projects, or operational surge support.
• Have the demonstrated ability to work independently, manage competing priorities, collaborate across technical teams, and support mission-critical operations.

IDS is committed to providing superior work in the fields of science, engineering, data analytics and technology to government agencies. We offer competitive compensation packages, including comprehensive nationwide Medical/Dental/Vision insurance programs, life insurance, matching 401k contribution and Educational/Training support.

• comprehensive nationwide Medical/Dental/Vision insurance programs
• life insurance
• matching 401k contribution
• Educational/Training support

Travel Required

Yes . Up to 10% of the time

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.