Sr. Systems Engineer (Endpoint Detection & Response)

Themisinsight; Fort Meade (MD); On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Competitive health, dental, and vision plans

401k contributions of 6%

11 holidays and 25 days of PTO

Career counseling and development programs

Employee referral bonuses

Job summary

Themisinsight is seeking a Senior Systems Engineer specializing in Endpoint Detection and Response to work in Fort Meade, MD. This role involves leading the lifecycle engineering of security solutions and collaborating with threat analysts to enhance the security posture against cyber threats.

The ideal candidate will have extensive experience in systems engineering, specifically with Microsoft Defender for Endpoint and Trellix HX. Competitive benefits include health plans, 401k contributions, and substantial time off.

Qualifications

• 20 years of experience as a Systems Engineer in similar programs required.
• Demonstrated experience in planning and leading Systems Engineering efforts.
• Expertise in Microsoft Defender for Endpoint architecture and policies.

Responsibilities

• Lead lifecycle engineering and architecture of EDR solutions.
• Translate threat intelligence into technical indicators.
• Act as primary technical advisor to government stakeholders.

Skills

Microsoft Defender for Endpoint (MDE) expertise

Kusto Query Language (KQL)

Strong collaboration skills

In-depth technical understanding of OS internals

Education

Bachelor’s degree in System Engineering or related field

Tools

MECM/SCCM

Intune

Atlassian Suite (Jira, Confluence)

Job description

Senior Systems Engineer (Endpoint Detection & Response)

We are hiring a senior systems engineer to work in Fort Meade, MD; position location is subject to change based on central MD client's needs.

Security Clearance

Required: TS/SCI with a Polygraph.

Job Description

The Senior Systems Engineer (Level 3) serves as a principal technical leader and subject matter expert within the National Security Agency’s Enterprise Endpoint Detection and Response (EDR) Program. Operating in a highly classified, multi-domain infrastructure, the successful candidate will drive the strategic architectural design, end-to-end integration, deployment, and optimization of premier endpoint security platforms, specifically Microsoft Defender for Endpoint (MDE) and Trellix HX. This critical role bridges high-level systems architecture with operational defense capabilities, ensuring total endpoint visibility, robust threat containment, and resilient configuration management across all enterprise and mission-critical assets to defend national security infrastructure against sophisticated cyber threats.

Essential Duties and Responsibilities

• The Systems Engineer 3 is responsible for leading the lifecycle engineering and scale-out architecture of MDE and Trellix HX across hybrid environments, including on-premises, cloud, and virtual desktop infrastructures (VDI). This includes authoring complex system engineering and implementation plans, tuning agent configurations and exclusion policies to eliminate mission friction, and monitoring overall endpoint health at scale.
• The engineer will collaborate closely with threat hunting and intelligence analysts to translate actionable threat intelligence into custom technical indicators of compromise (IOCs), utilizing Kusto Query Language (KQL) and YARA rules.
• Additionally, the individual will act as a primary technical advisor to Government stakeholders on system risks and engineering considerations, provide advanced forensic support to the SOC during critical high-priority incidents, and actively mentor junior and mid-level engineering personnel within the program.

Required Experience

• Twenty (20) years experience as a SE in programs and contracts of similar scope, type and complexity is required. Demonstrated experience in planning and leading Systems Engineering efforts is required. Bachelor’s degree in System Engineering, Computer Science, Information Systems, Engineering Science, Engineering Management, or related discipline from an accredited college or university is required. Five (5) years of additional SE experience may be substituted for a bachelor’s degree.
• Microsoft Defender for Endpoint (MDE) Expertise: Proven engineering experience with MDE architecture, deployment strategies via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL).
• Trellix HX Expertise: Demonstrated experience engineering, deploying, and managing Trellix HX (formerly FireEye) controllers and agents within airgapped or highly restricted networks, including the creation of OpenIOC and YARA rules.
• Operating System & Forensic Knowledge: In-depth technical understanding of Windows, Linux, and macOS internals, including file systems, registry structures, and process execution mechanics.
• Professional Standards: Compliance with DoD 8570/8140 IAM Level II or III baseline certifications.

Desired Experience

• Vendor Certifications: Microsoft Certified: Security Operations Analyst Associate (SC-200), Azure Security Engineer Associate (AZ-500), or Trellix Certified Engineering credentials.
• Methodologies & Toolsets: Experience with Model-Based Systems Engineering (MBSE), Cameo, and workflow management within the Atlassian Suite (Jira, Confluence).
• Technical Frameworks: Familiarity with NSA Technical Manual Standards (e.g., NSA DS-89) and defense-in-depth engineering principles.
• Core Competencies: Strong record of team collaboration, exceptional transparency in managing high-consequence infrastructure, and an aptitude for developing technical leadership pipelines.

Benefits

• Competitive health, dental, and vision plans with 100% paid premiums.
• 401k: We contribute 6% even if you don't!
• Time Off: 11 standard holidays, and 25 days of PTO
• Career Development: Get career counseling and individualized career development plans, including education and training.
• Employee referral bonuses for successful hires

Equal Opportunity Statement

Themis Insight is an Equal Opportunity/Affirmative Action employer.

Themis Insight provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.