Endpoint Security Analyst: Elastic Defend & 24/7 Defense

Leidos LLC; Adelphi (MD); Hybrid; USD 108,000 - 195,000; Full time

Benefits offered by this job

Health and Wellness programs

Paid Leave and Retirement

Competitive compensation

Job summary

Leidos is seeking an experienced Endpoint Security Analyst to support a DoW cyber security task order. You will deploy Elastic Agent and Elastic Defend across the enterprise to enhance threat detection, telemetry collection, and automated response capabilities.

You will configure endpoint protection, tune telemetry, build dashboards, and collaborate with Threat, Detection, and Engineering teams to strengthen defenses and rapidly respond to threats. U.S.

Qualifications

• Bachelor's degree in STEM, cybersecurity, or related field.
• 4+ years of relevant cybersecurity experience.
• Hands-on experience with enterprise endpoint security or EDR.
• Strong knowledge of MITRE ATT&CK.
• Excellent written and verbal communication."

Responsibilities

• Deploy and manage Elastic Agent and Elastic Defend across endpoints.
• Tune endpoint protection to maximize visibility while minimizing performance impact.
• Develop and customize detection rules and threat signatures.
• Conduct host-based cyber operations to identify and remediate vulnerabilities.
• Support investigations with advanced endpoint queries and forensic data.
• Create dashboards and reports for enterprise security visibility.
• Coordinate deployments and patches with engineering teams.
• Troubleshoot security tool issues and outages.
• Develop endpoint security policies and SOPs.
• Evaluate emerging endpoint security tools and provide recommendations.

Skills

Endpoint security

Threat detection

Incident response

Analytical thinking

Cross-team collaboration

Education

Bachelor's degree in STEM or cybersecurity

Tools

Elastic Agent

Elastic Defend

CrowdStrike Falcon

Tanium

McAfee ePO

Job description

Leidos is seeking an experienced Endpoint Security Analyst to support a DoW cyber security task order. You will deploy Elastic Agent and Elastic Defend across the enterprise to enhance threat detection, telemetry collection, and automated response capabilities.

You will configure endpoint protection, tune telemetry, build dashboards, and collaborate with Threat, Detection, and Engineering teams to strengthen defenses and rapidly respond to threats. U.S.