Endpoint Security / ESS Engineer (Journeyman)

DecisionPoint | Cortek; United States; Remote; USD 110,000 - 170,000; Full time

Job summary

DecisionPoint | Cortek seeks a Journeyman Endpoint Security/ESS Engineer to support DoD endpoint-security solutions for the USMEPCOM ENLIST program. The role focuses on agent health, policy enforcement, and compliance reporting, with responsibilities across incident investigation and remediation.

You will coordinate deployments, monitor endpoint-health, and provide evidence for security-control activities in a largely remote setting, with a preference for Chicago-area candidates.

Qualifications

• Active Secret clearance or higher.
• Bachelor's degree in Cybersecurity, Information Systems, or a related field.
• Minimum of 7 years of relevant cybersecurity, endpoint-security, information-assurance, or information-security experience.
• Current CompTIA Security+ certification.
• Hands-on experience administering or supporting McAfee endpoint-security technologies.

Responsibilities

• Serve as a technical specialist for McAfee/Trellix endpoint-security technologies in the DoD environment.
• Monitor agent health, connectivity, deployment, updates, and operational health of endpoints.
• Investigate unhealthy or noncommunicating agents and remediation failures.
• Support RMF/ATO/audit activities with endpoint-security evidence and reports.
• Coordinate deployments, upgrades, and remediation with Task 4 infrastructure personnel.

Skills

Endpoint security

McAfee/Trellix

Security+ certified

DoD environment

Incident response

Education

Bachelor's degree in Cybersecurity/IS

Tools

McAfee ePO

Endpoint security tools

Job description

Overview

DecisionPoint seeks a Journeyman Endpoint Security / ESS Engineer to support endpoint-security administration, policy enforcement, agent health, compliance reporting, and security-event investigation for the USMEPCOM ENLIST program.

The Endpoint Security / ESS Engineer will serve as a McAfee endpoint-security specialist supporting the Department of Defense Endpoint Security Solutions environment. The engineer will investigate security events, unhealthy agents, policy failures, and endpoint-compliance issues; implement approved corrective actions; and validate that required endpoint protections remain operational and effective.

This role will coordinate agent deployment and endpoint remediation activities with Task 4 infrastructure personnel, support cybersecurity incident reporting, and maintain technical evidence for security-control and authorization activities.

This position is remote, with a preference for candidates located in the Chicago area.

Note: By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid.

Duties & Responsibilities

The Endpoint Security / ESS Engineer will:

• Serve as a technical specialist for the McAfee/Trellix endpoint-security technologies supporting the DoD Endpoint Security Solutions environment.


• Support administration, configuration, maintenance, and monitoring of approved endpoint-security tools and services.


• Implement and maintain approved endpoint-security policies, configurations, exclusions, rules, and enforcement settings.


• Monitor endpoint agents for connectivity, communication, deployment, update, and operational-health issues.


• Investigate unhealthy, inactive, noncommunicating, outdated, or improperly configured endpoint agents.


• Diagnose policy-enforcement failures, update failures, deployment errors, and endpoint-protection gaps.


• Implement Government-approved corrective actions and validate that endpoint protections have been successfully restored.


• Review ESS reports and dashboards to identify security events, compliance issues, policy failures, and remediation needs.


• Investigate endpoint-security alerts and events and coordinate response activities with cybersecurity, infrastructure, application, and Government teams.


• Coordinate McAfee/Trellix agent deployment, upgrade, repair, removal, and replacement activities with Task 4 infrastructure personnel.


• Support endpoint-remediation activities involving operating-system configurations, security policies, agents, signatures, content updates, and approved software.


• Confirm that endpoints receive required policies, signatures, content, and product updates.


• Validate endpoint compliance following remediation, configuration changes, maintenance, or agent deployment.


• Track endpoint-security findings, assigned owners, corrective actions, dependencies, deadlines, and closure evidence.


• Support vulnerability remediation associated with endpoint-security configurations, agent health, or protection status.


• Collect and maintain logs, screenshots, reports, configuration information, and other evidence supporting remediation and compliance.


• Create and update incident, problem, change, and remediation tickets in the designated workflow platform.


• Support cybersecurity incident reporting by gathering relevant endpoint data, event details, logs, timelines, and investigative evidence.


• Escalate significant events, persistent policy failures, widespread agent-health issues, and unresolved compliance deficiencies.


• Coordinate with system administrators and asset-management personnel to reconcile endpoint records, agent status, and authoritative inventories.


• Support security-control testing and provide endpoint-security evidence for RMF, ATO, ATC, audit, and inspection activities.


• Develop endpoint-security compliance reports, agent-health summaries, event metrics, trend analyses, and briefing materials.


• Maintain endpoint-security procedures, configuration documentation, standard operating procedures, troubleshooting guides, and technical knowledge articles.


• Recommend technical and process improvements that strengthen endpoint protection, agent health, monitoring, and compliance reporting.

Qualifications

Required Qualifications

• Active Secret clearance or higher.


• Bachelor's degree in Cybersecurity, Information Systems, or a related field.


• Minimum of 7 years of relevant cybersecurity, endpoint-security, information-assurance, or information-security experience.


• Current CompTIA Security+ certification.


• Hands-on experience administering or supporting McAfee endpoint-security technologies.

Preferred Qualifications

• Experience supporting DoD Endpoint Security Solutions in an enterprise environment.


• Experience with McAfee or Trellix ePolicy Orchestrator, Endpoint Security, McAfee Agent, threat-prevention modules, firewall policies, and web-control capabilities.


• Experience monitoring and remediating unhealthy, inactive, noncommuni