Hybrid Elastic Defend Endpoint Security Analyst

Quest Oracle Community; Adelphi (MD); Hybrid; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking an experienced Endpoint Security Analyst to support a high-visibility cyber operations task order. You will deploy, tune, and sustain endpoint protection using Elastic Agent and Elastic Defend while enhancing telemetry and threat detection across the enterprise.

You will work with threat, engineering, and cyber operations teams to strengthen endpoint defenses, investigate incidents, and deliver actionable insights.

Qualifications

• Bachelor's degree in STEM or cybersecurity with 4+ years of relevant experience.
• Hands-on experience deploying enterprise endpoint security or EDR.
• Strong understanding of endpoint protection, telemetry, detection, and response.
• Experience investigating endpoint security alerts and compromises.
• Familiarity with MITRE ATT&CK and current cyber threats.

Responsibilities

• Deploy, configure, operate, and troubleshoot Elastic Agent and Elastic Defend.
• Optimize endpoint protection and telemetry for visibility and detection.
• Customize detection rules and threat signatures with threat teams.
• Conduct host-based defensive operations to identify and remediate issues.
• Support investigations with advanced endpoint queries and forensics.
• Develop dashboards and reports for executive visibility.
• Coordinate security deployments, patches, and upgrades.
• Develop endpoint security policies and SOPs.

Skills

Endpoint security concepts

MITRE ATT&CK knowledge

Analytical problem solving

Cross-team collaboration

Effective communication

Education

Bachelor's in STEM or Cybersecurity

Tools

Elastic Agent

Elastic Defend

CrowdStrike Falcon

Tanium

EDR solutions

Job description

Leidos is seeking an experienced Endpoint Security Analyst to support a high-visibility cyber operations task order. You will deploy, tune, and sustain endpoint protection using Elastic Agent and Elastic Defend while enhancing telemetry and threat detection across the enterprise.

You will work with threat, engineering, and cyber operations teams to strengthen endpoint defenses, investigate incidents, and deliver actionable insights.