Cybersecurity Tools Administrator

Saic; Springfield (VA); On-site; USD 80,000 - 120,000; Full time

Job summary

SAIC seeks a Cybersecurity Tools Administrator to join the MAJESTIC Joint Program Office in Springfield, VA, focusing on Trellix ENS and integrated toolsets for an on-premises enterprise IT environment. The role emphasizes policy management, deployments, health/compliance, and SIEM/SOAR integrations.

The position requires experience with endpoint security tools, strong knowledge of RMF/NIST 800-53, and the ability to collaborate with cross-functional teams to strengthen security posture.

Qualifications

• 2-5 years administering enterprise cybersecurity tools and security operations.
• Experience with Trellix ePO/ENS, EDR/NDR in an Enterprise IT environment.
• Knowledge of RMF/NIST 800-53 controls and related security processes.

Responsibilities

• Administer Trellix ePolicy Orchestrator, configure policies, deployments, and compliance.
• Integrate endpoint tools with SIEM/SOAR and vulnerability management stacks.
• Develop dashboards and KPIs for endpoint coverage and policy compliance.
• Support incident response with endpoint forensics, isolation, and IOC sweep.
• Coordinate with IT teams to enforce security controls across on-premise environments.

Skills

Trellix ePO/ENS

EDR/NDR

DAC

IOC sweep

endpoint isolation

Windows security

Linux security

Log analysis

Incident response

RMF/NIST 800-53

Education

Bachelor's degree

Master's degree

High School diploma

Tools

SIEM/SOAR

Splunk

Nessus/ACAS

Job description

Description

SAICisseekinga motivatedCybersecurity Tools Administratorto join ourMAJESTIC Joint Program Office (JPO) Teamin support ofan on-premises enterprise IT environment. This role focuses on implementing, administering, and optimizing cybersecurity toolsetscentered onTrellixEndpoint Security (ENS) andintegrated capabilities such as Endpoint Detection & Response (EDR), Network Detection & Response (NDR), and malware protection. The administrator will manage policy, deployment, health/compliance, telemetry, and integrations with SIEM/SOAR to strengthen enterprise security posture.

All work is performedon-sitein Springfield, VA.

Key Responsibilities:

• AdministerTrellixePolicyOrchestrator (ePO): configure policies, tasks, and client assignments; perform agent deployment/updates;monitorhealth and compliance across Windows/Linux endpoints.
• Implement andmaintaincybersecurity toolsets including ESS/ENS, EDR, NDR, and malware protection; tune detections and containment to reduce false positives while improving fidelity.
• Integrate endpoint tools with enterprise SIEM/SOAR (e.g., Splunk) and vulnerability management stacks (e.g., Nessus/ACAS) to enable unified visibility, correlation, and automated response.
• Develop andmaintaindashboards, reports, and KPIs for endpoint coverage, policy compliance, threat activity, and vulnerability remediation progress.
• Conduct enterprise-wide agent posture checks; remediate orphaned agents, stale policies, connectivity issues, and broken update channels.
• Author andmaintainstandard operating procedures (SOPs), change records, and implementation plans; follow standardized test, certification, and deployment procedures.
• Support incident response by providing endpoint forensics, containment actions (e.g., DAC), isolation, and IOC sweep capability;assistwith root-cause analysis and corrective actions.
• Coordinate with Systems Administrators, Network Engineers, and Cybersecurity personnel to assess risks,validateconfigurations, and enforce security controlsin accordance withRMF/NIST 800-53.
• Ensure tool and control configuration compliance; review change requests;validateeffectiveness of security controls across virtualized Windows/Linux servers and enterprise networks.

• Maintain detailed documentation including release notes, configuration baselines, incident investigations, and compliance/authorization artifacts.

Qualifications

Education:

• Bachelors degree in related field and 2-9+ years of experience OR;
• Masters degree in related field and 0-7+ years of experience OR;
• High School diploma or equivalent and 6-13+ years of experience.

Certifications (CWF Requirements):

• Candidates must satisfyCybersecurity Workforce Framework (CWF) ID 521 (Cyber Defense Infrastructure Support Specialist, IntermediateLevel) requirements, as outlined by Navy COOL. This requirement can be met bypossessingone or more of the following qualifyingcertifications:
• Certified Ethical Hacker (CEH).
• CompTIA Cloud+.
• CompTIA Cybersecurity Analyst (CySA+).
• CompTIA PenTest+.
• CompTIA Security+.
• GIAC Continuous Monitoring Certification (GMON).
• GIAC Response and Industrial Defense (GRID).
• GIAC Security Essentials Certification (GSEC).
• Systems Security Certified Practitioner (SSCP).

ORThis requirement can be met through:

• A Bachelor’s Degreein Cybersecurity, Computer Science, IT, or a related field.

Experience:

• 2-5 yearsof experience administering enterprise cybersecurity tools (e.g., Trellix ePO/ENS, EDR/NDR) and performing endpoint/security operations in an enterprise IT environment.

Technical Skills:

• ProficiencyadministeringTrellixePOand ENS/ESS; familiarity with Dynamic Application Containment (DAC), IOC sweep, and endpoint isolation.
• Understanding of cybersecurity frameworks and processes (NIST 800-53, RMF, ICD 503).
• Solid knowledge of Windows/Linux security configurations, AD-integrated deployments, and enterprise network concepts.
• Familiarity with incident response procedures, log analysis, and database/server hardening.

Clearance Requirement:

• ActiveTS/SCIclearance with the ability to obtain andmaintainaTS/SCI withCIPoly.

Work Environment and Notes:

• On-site Work:All work must be conducted on-site in Springfield, VA.
• Program Scope:Supports on-premises enterprise IT environments, including virtualized Windows/Linux servers, databases, and comprehensive networking layers.
• Subcontractor Role:Roles and responsibilities are defined per the subcontract agreement, with salary based on competitive market rates and role-specific requirements.

Target salary range: $80,001 - $120,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.