Cybersecurity Systems Engineer (NH3)

Legato, LLC; Maryland; On-site; USD 220,000 - 240,000; Full time

Job summary

Legato, LLC is seeking a Cybersecurity Systems Engineer to lead endpoint security across hybrid environments, focusing on Microsoft Defender for Endpoint and Trellix HX.

This role requires TS/SCI w/ Polygraph, hands-on deployment via MECM/SCCM or Intune, OpenIOC and YARA rule work, and strong OS forensics knowledge. You will mentor engineers and advise stakeholders on risks, with the Fort Meade, MD location.

Qualifications

• 20 years of experience as a systems or cybersecurity engineer.
• Proven experience with MDE architecture and deployment.
• Experience deploying Trellix HX controllers and agents in restricted networks.
• Strong OS forensics knowledge across Windows, Linux, and macOS.
• IAM Level II or III certifications or equivalent.

Responsibilities

• Lead lifecycle engineering and scale-out architecture of MDE and Trellix HX.
• Author complex system engineering and implementation plans.
• Provide advanced forensic support to the SOC during incidents.
• Mentor junior and mid-level engineers within the program.

Skills

MDE architecture

Trellix HX

KQL

Endpoint security

Forensics

Communication with stakeholders

Mentoring juniors

Education

Bachelor's degree in a technical discipline

IAM Level II or III certification

Tools

MECM/SCCM

Intune

OpenIOC

YARA rules

Job description

Legato, LLC recruiters ([e-mail]) would love to speak with you regarding the following position: Cybersecurity Systems Engineer inFort Meade, MD.

Security Clearance Required: TS/SCI w/ Polygraph

Salary Range: $220,000-$240,000, depending on experience.

What You Will Do:

The Cybersecurity Systems Engineer will serve as a technical leader and subject matter expert within the Endpoint Detection and Response (EDR) Program. Operating in a multi-domain infrastructure, the successful candidate will drive the strategic architectural design, end-to-end integration, deployment, and optimization of premier endpoint security platforms, specifically Microsoft Defender for Endpoint (MDE) and Trellix HX. This critical role bridges high-level systems architecture with operational capabilities, ensuring total endpoint visibility, robust threat containment, and resilient configuration management across all enterprise and critical assets to defend the security infrastructure against sophisticated cyber threats. The Engineer is responsible for leading the lifecycle engineering and scale-out architecture of MDE and Trellix HX across hybrid environments, including on-premises, cloud, and virtual desktop infrastructures (VDI). This includes authoring complex system engineering and implementation plans, tuning agent configurations and exclusion policies to eliminate mission friction, and monitoring overall endpoint health at scale. Additionally, the individual will act as a primary technical advisor to stakeholders on system risks and engineering considerations, provide advanced forensic support to the SOC during critical high-priority incidents, and actively mentor junior and mid-level engineering personnel within the program

Our minimum requirements for this role:

• Experience with Microsoft Defender for Endpoint (MDE) Expertise: Proven engineering experience with MDE architecture, deployment strategies via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL).
• Trellix HX Expertise: Demonstrated experience engineering, deploying, and managing Trellix HX (formerly FireEye) controllers and agents within air-gapped or highly restricted networks, including the creation of OpenIOC and YARA rules.
• Operating System & Forensic Knowledge: In-depth technical understanding of Windows, Linux, and macOS internals, including file systems, registry structures, and process execution mechanics.
• IAM Level II or III baseline certifications
• Twenty (20) years of experience as a systems engineer or cybersecurity engineer is required
• Bachelor's degree in a related technical discipline from an accredited college or university. Five (5) additional years of System Engineering experience may be substituted for a bachelor's degree.

About Your New Company

Legato, LLC is a dynamic small business headquartered in Columbia, near Ft. Meade, MD. Our positions include Cyber, Software, Systems, Networking, Data Science and other complex engineering capabilities. We set ourselves apart by having employees in the top of their field and who enjoy working at Legato for its attention to its employees, aggressive compensation, and upward mobility possibilities.

We offer a generous benefits package including individual and family health, vision and dental benefits. A minimum of four (4) weeks of paid time off including a week of sick leave. Legato gives our employees 11 federal holidays off and a 401(k) employer match with no vesting schedule. There is an opportunity to earn referral benefits or bank hours if the contract allows.

Disclaimer: The salary range provided is an estimate based on current market conditions and may be adjusted based on factors such as experience, skills, and qualifications. The final salary offer will be determined after a thorough review of the candidate's background and alignment with the role. Please note that this range is subject to change and should be considered as a guideline rather than a definitive figure.

Legato LLC is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, protected veteran status, or disability status.