Endpoint Security Engineer III

Job Description

ECS is seeking an Endpoint Security Engineer III to work remotely .

Overview

The Endpoint Security Engineer provides engineering support for endpoint security platforms within a federal energy sector cybersecurity program. This role focuses on managing and optimizing endpoint detection and response (EDR) and endpoint data protection technologies to meet Information Security Continuous Monitoring (ISCM) and DHS Continuous Diagnostics and Mitigation (CDM) requirements. The engineer will ensure endpoint telemetry is reliable, integrated, and aligned to program compliance needs.

Core Capabilities

• Deploy, configure, and maintain endpoint detection and response platforms (e.g., CrowdStrike).
• Manage endpoint data protection technologies, including DLP and device control, to monitor and prevent data exfiltration.
• Ensure endpoint telemetry integrates with SIEM, SOAR, and CDM dashboards.
• Tune endpoint policies and detection logic to balance security, performance, and usability.
• Collaborate with compliance teams to align endpoint security controls with regulatory and CDM requirements.
• Support incident response by validating and improving endpoint detection coverage.
• Document endpoint configurations, baselines, and data flows for audit and compliance purposes.
  
  

Salary Range: $125,000 - $152,000

Required Skills

General Description of Benefits

• U.S. Citizenship
• Ability to obtain and maintain a DOE "L" clearance or DoD Secret clearance with reciprocity
• 5 years of experience in cybersecurity engineering, with at least 3 years focused on endpoint security
• Hands-on experience with enterprise EDR platforms (CrowdStrike preferred)
• Experience integrating endpoint data (EDR, DLP, device control) into SIEM and dashboards
• Scripting skills (PowerShell, Python, or Bash) for endpoint automation and telemetry tuning
• Familiarity with federal cybersecurity standards (FISMA, NIST 800-53, ISCM, CDM Phase 4)
  
  

Desired Skills

• Experience with endpoint DLP or CASB integrations (Microsoft Purview, Forcepoint, or similar)
• Familiarity with endpoint identity protection capabilities (e.g., CrowdStrike Identity Protection)
• Certifications such as CISSP, GCIA, or vendor-specific EDR/DLP certifications
• Exposure to OT/ICS endpoints and critical infrastructure environments
  
  

#ECS1

ECS is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

ECS is a leading mid-sized provider of technology services to the United States Federal Government. We are focused on people, values and purpose. Every day, our 3500 employees focus on providing their technical talent to support the Federal Agencies and Departments of the US Government to serve, protect and defend the American People.