Senior Endpoint Security Engineer - TS/SCI Eligible

Relha LLC; Fort Meade (MD); On-site; USD 132,000 - 290,000; Full time

Job summary

CACI is seeking a Senior Systems Engineer to lead the Enterprise Endpoint Detection and Response (EDR) program, focusing on Microsoft Defender for Endpoint and Trellix HX across hybrid environments. You will architect, deploy, and optimize end-user protection in highly classified settings to ensure visibility and rapid containment.

You will mentor engineers, collaborate with threat hunters and government stakeholders, and deliver advanced documentation and IOC development using KQL and YARA to

Qualifications

• 20+ years of experience as a Systems Engineer on programs of similar scope, type, and complexity.
• Proven experience planning and leading Systems Engineering efforts.
• Bachelor’s degree in Systems Engineering, Computer Science, Information Systems, Engineering Science, Engineering Management, or a related field.
• Five (5) additional years of Systems Engineering experience may be substituted for a bachelor’s degree.
• Microsoft Defender for Endpoint Expertise: Hands-on engineering experience with MDE architecture, deployment via MECM/SCCM or Intune, policy ring management, and advanced hunting using KQL.
• Trellix HX Expertise: Engineer, deploy, and manage Trellix HX controllers and agents in air-gapped networks, including OpenIOC and YARA rules.
• OS & Forensic Knowledge: Windows, Linux, macOS internals, file systems, registries, process execution behavior.
• DoD 8570/8140 IAM Level II or III baseline certifications.
• Vendor Certifications: MS Security Operations Analyst (SC-200), Azure Security Engineer (AZ-500).
• MBSE, Cameo, Jira/Confluence familiarity.
• NSA Manual standards familiarity (NSA DS-89).
• Strong collaboration & mentoring skills.

Responsibilities

• Lead full lifecycle engineering and scale-out architecture of MDE and Trellix HX across on-prem, cloud, and VDI.
• Develop advanced system engineering documentation, deployment strategies, and implementation plans.
• Optimize agent configurations, exclusion policies, and performance for mission success.
• Monitor and maintain enterprise endpoint health at scale.
• Work with threat hunters to convert intelligence into custom IOCs using KQL and YARA.
• Serve as a primary advisor to Government stakeholders on risks and design decisions.
• Provide advanced forensic and technical support to SOC during incidents.
• Mentor junior and mid-level engineers to foster growth.

Skills

MDE Architecture

Intune deployment

KQL

YARA

Threat hunting

Forensics

Windows internals

Linux internals

MacOS internals

MBSE

Jira

Confluence

Education

Bachelor’s degree in Systems Engineering or related field

Tools

MECM/SCCM

Intune

KQL

YARA

OpenIOC

NSA DS-89

Job description

CACI is seeking a Senior Systems Engineer to lead the Enterprise Endpoint Detection and Response (EDR) program, focusing on Microsoft Defender for Endpoint and Trellix HX across hybrid environments. You will architect, deploy, and optimize end-user protection in highly classified settings to ensure visibility and rapid containment.

You will mentor engineers, collaborate with threat hunters and government stakeholders, and deliver advanced documentation and IOC development using KQL and YARA to