Senior Defender Engineer - DoD RMF & Endpoint Security

Vista Global Solutions, LLC; Bethesda, Northern (MD, KY); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Paid holidays

Paid time off

Medical insurance

Dental insurance

Vision insurance

401(k) with company match

Tuition reimbursement

Job summary

Vista Global Solutions seeks a Senior Information System Security Engineer to lead the migration and enterprise implementation of Microsoft Defender across Windows, macOS, and Linux for USUHS. The role ensures Defender configurations, endpoint controls, and transition activities meet DoD cybersecurity requirements and DISA STIGs.

You will perform STIG assessments, SCAP scans, and develop compliance documentation, coordinating remediation and RMF artifacts.

Qualifications

• 5+ years of cybersecurity engineering, information assurance, or security compliance experience, preferably supporting Federal or DoD environments.
• Active DoD Secret security clearance required.
• Current DoD IAT Level II-compliant certification, such as Security+ CE, CySA+, or GSEC, as applicable to current DoD requirements.
• Demonstrated experience implementing or assessing DISA STIGs and DoD cybersecurity requirements.
• Experience with RMF and A&A processes.
• Experience developing or maintaining cybersecurity documentation, including STIG checklists, POA&Ms, security control evidence, and ATO artifacts.
• Experience with enterprise endpoint security technologies and Windows endpoint security controls.
• Knowledge of encryption technologies and key-management concepts, including BitLocker and FileVault.
• Ability to analyze technical security findings and communicate risks and remediation recommendations to technical and non-technical stakeholders.

Responsibilities

• Perform STIG assessments, security hardening, and compliance validation for Microsoft Defender tenant configurations and Windows, macOS, and Linux endpoints.
• Conduct SCAP scans and manual configuration reviews to validate DISA STIG compliance.
• Develop and maintain STIG Compliance Checklists and supporting security documentation for enterprise deployment.
• Identify security findings, recommend corrective actions, and coordinate remediation to meet compliance thresholds.
• Validate endpoint security safeguards before removal of legacy Trellix components (BitLocker and FileVault).
• Verify security audit and telemetry integration with Splunk SIEM and Microsoft Sentinel.
• Review security exceptions, deployment variances, and enclave-specific requirements and assess cybersecurity risks.
• Support RMF lifecycle, including A&A artifacts and Authorization to Operate documentation within eMASS.
• Perform vulnerability assessments and patch-compliance verification using ACAS.
• Develop, maintain, and track POA&Ms through remediation and closure.
• Coordinate with cybersecurity, endpoint engineering, infrastructure, and operations stakeholders to ensure security requirements are applied during Defender transition.
• Provide cybersecurity engineering recommendations and technical guidance to program leadership and Government stakeholders.

Skills

Security engineering

DoD/ Federal cybersecurity experience

RMF/A&A experience

Communication with stakeholders

Tools

DISA STIGs

STIG Viewer

ACAS

eMASS

Splunk

Microsoft Defender

BitLocker

FileVault

Microsoft Sentinel

Job description

Vista Global Solutions seeks a Senior Information System Security Engineer to lead the migration and enterprise implementation of Microsoft Defender across Windows, macOS, and Linux for USUHS. The role ensures Defender configurations, endpoint controls, and transition activities meet DoD cybersecurity requirements and DISA STIGs.

You will perform STIG assessments, SCAP scans, and develop compliance documentation, coordinating remediation and RMF artifacts.