Endpoint Security Analyst - Elastic Defender & Telemetry

Leidos; Adelphi (MD); Hybrid; USD 108,000 - 195,000; Full time

Job summary

Leidos seeks an experienced Endpoint Security Analyst to support a DoW cyber operations task order. You will deploy, configure, and sustain Elastic Agent and Elastic Defend across enterprise endpoints, optimize telemetry collection, and enhance threat detection with MITRE ATT&CK techniques.

You will work with Threat, Engineering, and Cybersecurity Operations teams to strengthen defenses, improve visibility, and rapidly respond to threats.

Qualifications

• Bachelor's degree in STEM, cybersecurity, or related field; 4+ years of cybersecurity experience.
• Hands-on experience deploying/configuring enterprise endpoint security/EDR solutions.
• Strong understanding of endpoint protection, telemetry, threat detection, and incident response.
• Familiarity with MITRE ATT&CK framework and threat intelligence.
• US citizenship with TS/SCI and SAP eligibility; one of the listed certifications is preferred.

Responsibilities

• Deploy, configure, operate, tune, upgrade, and troubleshoot Elastic Agent, Elastic Defend, and related endpoint security technologies.
• Optimize endpoint protection and telemetry to maximize visibility while minimizing performance impact.
• Collaborate with Threat and Detection teams to customize detections and MITRE-aligned rules.
• Conduct host-based defensive cyber operations to identify, contain, and remediate vulnerabilities.
• Support investigations using endpoint queries, forensic data collection, and rapid containment actions.
• Develop queries, dashboards, and reports for enterprise security visibility and leadership awareness.
• Coordinate with engineering on deployments, patches, upgrades, and security updates.
• Troubleshoot endpoint security tool issues and outages.
• Develop and maintain endpoint security SOPs and configurations.
• Evaluate emerging endpoint security tools and certifications.

Skills

Endpoint security

EDR

Threat detection

MITRE ATT&CK

Analytical skills

Communication skills

Collaboration

Education

Bachelor's degree in STEM/related field

4+ years cybersecurity experience

Tools

Elastic Agent

Elastic Defend

CrowdStrike Falcon

Tanium

McAfee ePO

Job description

Leidos seeks an experienced Endpoint Security Analyst to support a DoW cyber operations task order. You will deploy, configure, and sustain Elastic Agent and Elastic Defend across enterprise endpoints, optimize telemetry collection, and enhance threat detection with MITRE ATT&CK techniques.

You will work with Threat, Engineering, and Cybersecurity Operations teams to strengthen defenses, improve visibility, and rapidly respond to threats.