Vulnerability Management and Endpoint Security Administrator

Leidos; Fort Belvoir (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

Leidos is seeking a Vulnerability Management and Endpoint Security Administrator to provide cybersecurity expertise supporting large-scale migration and operations on a DoW contract. The role focuses on improving enterprise vulnerability posture and endpoint security across diverse environments.

The candidate will analyze risks, determine remediation priorities, and balance cybersecurity requirements with operational objectives, leveraging ACAS/Nessus, Tanium, and Trellix technologies to guide

Qualifications

• Strong technical expertise with ACAS/Nessus and Tanium.
• Working knowledge of Trellix endpoint-security technologies.
• Ability to independently analyze vulnerability and endpoint-security issues.

Responsibilities

• Analyze enterprise vulnerability and endpoint-security posture across Windows, Linux, and virtual environments.
• Administer ACAS/Nessus vulnerability-management capabilities, including scanning architectures and policies.
• Perform risk-based remediation prioritization and recommend remediation strategies to owners and leadership.
• Evaluate vulnerabilities, exceptions, and risk, providing technical assessments to cybersecurity teams.
• Leverage endpoint tools to assess asset inventory, configuration posture, and remediation needs.

Skills

ACAS/Nessus

Tanium

Trellix endpoint security

Vulnerability management

Endpoint security

Incident response

Risk assessment

STIGs

Job description

Leidos is seeking a Vulnerability Management and Endpoint Security Administrator to provide cybersecurity expertise supporting large-scale migration and operations on a high-profile Department of War (DoW) contract. The I3TS program provides enterprise-wide IT support to enable the Defense Threat Reduction Agency's Information Management & Technology Directorate to consolidate, modernize, and continuously improve delivery of IT services and mission capabilities to internal and external mission partners operating in CONUS and OCONUS locations.

The selected candidate will serve as a cybersecurity subject matter resource across the Vulnerability Management and Endpoint Security teams and will exercise independent judgment in analyzing cybersecurity risks, determining remediation priorities, evaluating technical solutions, and recommending courses of action affecting enterprise endpoints and infrastructure.

The role requires strong technical expertise with ACAS/Nessus and Tanium, along with working knowledge of Trellix endpoint-security technologies. The candidate will independently evaluate complex vulnerability and endpoint-security issues, assess operational and mission impacts, and develop recommendations that balance cybersecurity requirements, technical feasibility, and operational objectives.

Primary Responsibilities

• Independently analyze enterprise vulnerability and endpoint-security posture across Windows, Linux, virtual, and other enterprise environments and recommend technical and risk-based courses of action.
• Administer and optimize Assured Compliance Assessment Solution (ACAS)/Nessus vulnerability-management capabilities, including scan architecture, policies, credentialed scanning, analysis, reporting, and technical troubleshooting.
• Perform in-depth vulnerability and risk analysis; validate findings; assess technical, operational, and mission impacts; establish risk-based remediation priorities; and recommend remediation strategies to system owners and technical leadership.
• Exercise independent technical judgment in evaluating vulnerabilities, compensating controls, remediation alternatives, exceptions, and cybersecurity risks.
• Leverage Tanium capabilities to analyze endpoint visibility, asset inventory, compliance, vulnerability exposure, configuration posture, and remediation requirements across the enterprise.
• Analyze endpoint-security posture using Trellix and associated technologies; investigate security alerts, policy issues, configuration deficiencies, agent-health concerns, and other conditions requiring technical evaluation.
• Correlate vulnerability, endpoint, asset-inventory, compliance, and security-tool data to identify systemic security risks, coverage gaps, unmanaged assets, trends, and enterprise remediation priorities.
• Develop and recommend technical solutions for complex vulnerability-management and endpoint-security issues, considering cybersecurity risk, system dependencies, operational requirements, and mission impact.
• Evaluate vulnerability exceptions and risk-acceptance requests and provide technical risk assessments and recommendations to cybersecurity, technical, and program leadership.
• Analyze endpoint configurations and security baselines and recommend security-hardening strategies consistent with Security Technical Implementation Guides (STIGs), applicable security controls, and operational requirements.
• Develop vulnerability-management metrics, dashboards, risk analyses, trend reporting, and executive-level summaries that enable leadership to make informed cybersecurity and risk-management decisions.
• Provide cybersecurity expertise during incident-response, threat-hunting, and endpoint-containment activities and independently assess appropriate technical actions when vulnerabilities or malicious activity are identified.
• Evaluate proposed changes to endpoint architectures, configurations, software, security tooling, and infrastructure; determine cybersecurity and operational impacts; identify alternatives; and provide technical recommendations to leadership.
• Analyze and recommend improvements to vulnerability-management and endpoint-security processes, controls, technologies, and operating procedures to increase effectiveness, reduce cybersecurity risk, and improve enterprise security posture.
• Develop technical standards, procedures, methodologies, process documentation, and knowledge articles governing vulnerability-management and endpoint-security activities.
• Serve as a technical advisor to system owners, engineers, cybersecurity personnel, and program leadership regarding vulnerability-management and endpoint-security risks, priorities, and remediation strategies.
• Manage competing cybersecurity priorities and independently determine appropriate technical approaches within established program, contractual, and security requirements.
• Work effectively in a fast-paced environment requiring independent decision-making across short-, mid-, and long-term cybersecurity an