Cybersecurity Engineer – TS/SCI | EDR & DLP (Hybrid)

Drawbridge; Gaithersburg (MD); Hybrid; USD 140,000 - 160,000; Full time

Benefits offered by this job

Competitive salary & benefits

Paid time off & holidays

Certification reimbursement

Program stability

Job summary

Drawbridge Recruiting is partnering with a leading national security contractor to hire a Mid-Level Cybersecurity Engineer for a mission-critical government program. You'll own the Carbon Black endpoint security platform and the data loss prevention (DLP) controls that keep sensitive information secure.

This hands-on role requires deploying, configuring and tuning the tools, writing policies, investigating alerts, and collaborating with the SOC, Insider Threat and Incident Response teams.

Qualifications

• Active TS/SCI with CI Polygraph (must be current at time of hire).
• 4–7 years of IT or cybersecurity experience.
• Hands-on Carbon Black administration (EDR/Response, App Control/Protection/Device Control).
• Experience designing and enforcing DLP and device control policies in an enterprise environment.

Responsibilities

• Administer, configure and tune Carbon Black across enterprise Windows and Linux endpoints.
• Build and enforce DLP policies to stop unauthorized data transfer.
• Create and maintain allow-listing and device control rules.
• Monitor, triage and investigate endpoint alerts and data exfiltration events.
• Partner with SOC, Insider Threat and Incident Response teams on investigations and remediation.
• Handle Carbon Black upgrades, patching, sensor deployment and platform health monitoring.
• Support RMF/ATO activities, including security control documentation and audit evidence.
• Produce reports and metrics on endpoint posture and data protection trends.
• Maintain SOPs and configuration baselines.

Skills

TS/SCI with CI Polygraph

Carbon Black administration

DLP policy design

Windows & Linux endpoints

RMF/NIST 800-53 knowledge

DoD 8570 IAT Level II cert

Education

Bachelor's degree in IT, Cybersecurity or related field

Tools

PowerShell scripting

Splunk/Elastic/ArcSight SIEM

Job description

Drawbridge Recruiting is partnering with a leading national security contractor to hire a Mid-Level Cybersecurity Engineer for a mission-critical government program. You'll own the Carbon Black endpoint security platform and the data loss prevention (DLP) controls that keep sensitive information secure.

This hands-on role requires deploying, configuring and tuning the tools, writing policies, investigating alerts, and collaborating with the SOC, Insider Threat and Incident Response teams.