TS/SCI Cybersecurity Engineer — Endpoint & DLP Specialist

drawbridge; Gaithersburg (MD); Hybrid; USD 135,000 - 165,000; Full time

Benefits offered by this job

Benefits package

Training reimbursement

Hybrid schedule

Job summary

Drawbridge Recruiting is partnering with a national security contractor to hire a Mid-Level Cybersecurity Engineer for a mission-critical government program in Gaithersburg, MD or Tysons Corner, VA. You will own the Carbon Black endpoint security platform and DLP controls, deploying, configuring and tuning the tools to protect sensitive data.

This is a hands-on engineering role with a hybrid schedule; on-site work in a SCIF may be required.

Qualifications

• Active TS/SCI with CI Polygraph is required.
• 4–7 years of IT or cybersecurity experience.
• At least 2 years of hands-on Carbon Black administration.
• Experience designing and enforcing DLP and device control policies.
• Windows and Linux endpoints, AD and GP knowledge.
• Familiarity with DoD/IC security requirements and RMF.
• DoD 8140/8570 IAT Level II cert or ability to obtain within 6 months.
• Bachelor's degree in IT, Cybersecurity or related field or equivalent experience.

Responsibilities

• Administer, configure and tune Carbon Black across Windows and Linux endpoints.
• Build and enforce DLP policies to stop unauthorized data transfer.
• Create and maintain allow-listing and device control rules.
• Monitor, triage and investigate endpoint alerts and data exfiltration events.
• Collaborate with SOC, Insider Threat and Incident Response teams.

Skills

Security clearance: TS/SCI with CIPoly

Cybersecurity experience

Carbon Black administration

DLP policy design

Windows & Linux endpoints

NIST 800-53 / RMF familiarity

IAT Level II cert or equivalent

Education

Bachelor's degree in IT / Cybersecurity or related field

Tools

Carbon Black

PowerShell

Python

SIEM (Splunk/Elastic/ArcSight)

Job description

Drawbridge Recruiting is partnering with a national security contractor to hire a Mid-Level Cybersecurity Engineer for a mission-critical government program in Gaithersburg, MD or Tysons Corner, VA. You will own the Carbon Black endpoint security platform and DLP controls, deploying, configuring and tuning the tools to protect sensitive data.

This is a hands-on engineering role with a hybrid schedule; on-site work in a SCIF may be required.