Systems Engineer 3 (EDR)

Avid Technology Professionals; Linthicum (MD); On-site; USD 110,000 - 140,000; Full time

Job summary

Avid Technology Professionals seeks a skilled cybersecurity engineer to lead design, deployment, and operation of secure endpoints, leveraging MDE architecture and restricted-network expertise. DoD IAM Level II/III certifications are required, with strong OS forensics capabilities across Windows, Linux, and macOS.

Candidate will drive collaboration, implement defense-in-depth strategies, and contribute to leadership pipelines while maintaining transparency in managing high-consequence

Qualifications

• Experience architecture and deployment of Microsoft Defender for Endpoint (MDE) including policy ring management and advanced hunting using KQL.
• Experience engineering, deploying, and managing Trellix HX controllers and agents in restricted networks, including OpenIOC and YARA rule creation.
• In-depth OS forensics knowledge across Windows, Linux, and macOS, including internals, file systems, registry, and process execution mechanics.
• DoD 8570/8140 IAM Level II or III baseline certifications are required.

Skills

MDE Expertise

Trellix HX Expertise

OS Forensics Knowledge

Team Collaboration

Operational Transparency

Technical Leadership

Education

DoD 8570/8140 IAM Level II/III

SC-200 Certification

AZ-500 Certification

Trellix Certification (Engineering)

Tools

MBSE

Cameo

Jira

Confluence

Job description

Required:

• Microsoft Defender for Endpoint (MDE) Expertise: Proven engineering experience with MDE architecture, deployment strategies via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL).
• Trellix HX Expertise: Demonstrated experience engineering, deploying, and managing Trellix HX (formerly FireEye) controllers and agents within air-gapped or highly restricted networks, including the creation of OpenIOC and YARA rules.
• Operating System & Forensic Knowledge: In-depth technical understanding of Windows, Linux, and macOS internals, including file systems, registry structures, and process execution mechanics.
• Professional Standards: Compliance with DoD 8570/8140 IAM Level II or III baseline certifications.

Desired:

• Vendor Certifications: Microsoft Certified: Security Operations Analyst Associate (SC-200), Azure Security Engineer Associate (AZ-500), or Trellix Certified Engineering credentials.
• Methodologies & Toolsets: Experience with Model-Based Systems Engineering (MBSE), Cameo, and workflow management within the Atlassian Suite (Jira, Confluence).
• Technical Frameworks: Familiarity with NSA Technical Manual Standards (e.g., NSA DS-89) and defense-in-depth engineering principles.
• Core Competencies: Strong record of team collaboration, exceptional transparency in managing high-consequence infrastructure, and an aptitude for developing technical leadership pipelines.