Systems Engineer 3 (EDR) with Security Clearance

Avid Technology Professionals; Linthicum (MD); On-site; USD 120,000 - 170,000; Full time

Job summary

Avid Technology Professionals seeks a Systems Engineer 3 (EDR) in Linthicum Heights, MD to design and deploy endpoint security architectures, lead engineering efforts, and enforce secure workflows in restricted networks.

Expertise in Microsoft Defender for Endpoint, Trellix HX, and MBSE is required, with DoD IAM baseline certifications and vendor security credentials preferred.

Qualifications

• MDE architecture deployment via MECM/SCCM or Intune.
• Advanced hunting using KQL and policy ring management.
• Experience with Trellix HX in air-gapped networks.
• DoD IAM Level II/III baseline certification required.
• Vendor security certs welcomed (SC-200/AZ-500).
• MBSE, Cameo, Jira/Confluence experience preferred.
• Familiarity with NSA standards and defense-in-depth.

Responsibilities

• Design and deploy endpoint security architectures.
• Lead engineering efforts and provide technical leadership.
• Collaborate across teams to implement secure workflows.
• Develop and enforce security governance in restricted networks.

Skills

MDE expertise

Trellix HX expertise

OS forensics knowledge

team collaboration

technical leadership

Education

DoD 8570 IAM Level II/III baseline

Microsoft SC-200 or AZ-500 (vendor certs)

Trellix engineering credentials

Tools

Kusto Query Language (KQL)

MECM/SCCM or Intune

MBSE (model-based systems engineering)

Cameo

Atlassian Jira/Confluence

Trellix controllers/agents

Job description

Avid Technology Professionals Systems Engineer 3 (EDR) * Linthicum Heights, MD Required:

• Microsoft Defender for Endpoint (MDE) Expertise: Proven engineering experience with MDE architecture, deployment strategies via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL).
• Trellix HX Expertise: Demonstrated experience engineering, deploying, and managing Trellix HX (formerly FireEye) controllers and agents within air-gapped or highly restricted networks, including the creation of OpenIOC and YARA rules.
• Operating System & Forensic Knowledge: In-depth technical understanding of Windows, Linux, and macOS internals, including file systems, registry structures, and process execution mechanics.
• Professional Standards: Compliance with DoD 8570/8140 IAM Level II or III baseline certifications. Desired:
• Vendor Certifications: Microsoft Certified: Security Operations Analyst Associate (SC-200), Azure Security Engineer Associate (AZ-500), or Trellix Certified Engineering credentials.
• Methodologies & Toolsets: Experience with Model-Based Systems Engineering (MBSE), Cameo, and workflow management within the Atlassian Suite (Jira, Confluence).
• Technical Frameworks: Familiarity with NSA Technical Manual Standards (e.g., NSA DS-89) and defense-in-depth engineering principles.
• Core Competencies: Strong record of team collaboration, exceptional transparency in managing high-consequence infrastructure, and an aptitude for developing technical leadership pipelines.