Endpoint Security / ESS Engineer (Journeyman)

Overview

DecisionPoint seeks a Journeyman Endpoint Security / ESS Engineer to support endpoint-security administration, policy enforcement, agent health, compliance reporting, and security-event investigation for the USMEPCOM ENLIST program. 

The Endpoint Security / ESS Engineer will serve as a McAfee endpoint-security specialist supporting the Department of Defense Endpoint Security Solutions environment. The engineer will investigate security events, unhealthy agents, policy failures, and endpoint-compliance issues; implement approved corrective actions; and validate that required endpoint protections remain operational and effective. 

This role will coordinate agent deployment and endpoint remediation activities with Task 4 infrastructure personnel, support cybersecurity incident reporting, and maintain technical evidence for security-control and authorization activities. 

This position is remote, with a preference for candidates located in the Chicago area. 

Note: By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid. 

Duties & Responsibilities

The Endpoint Security / ESS Engineer will: 

• Serve as a technical specialist for the McAfee/Trellix endpoint-security technologies supporting the DoD Endpoint Security Solutions environment. 

• Support administration, configuration, maintenance, and monitoring of approved endpoint-security tools and services. 

• Implement and maintain approved endpoint-security policies, configurations, exclusions, rules, and enforcement settings. 

• Monitor endpoint agents for connectivity, communication, deployment, update, and operational-health issues. 

• Investigate unhealthy, inactive, noncommunicating, outdated, or improperly configured endpoint agents. 

• Diagnose policy-enforcement failures, update failures, deployment errors, and endpoint-protection gaps. 

• Implement Government-approved corrective actions and validate that endpoint protections have been successfully restored. 

• Review ESS reports and dashboards to identify security events, compliance issues, policy failures, and remediation needs. 

• Investigate endpoint-security alerts and events and coordinate response activities with cybersecurity, infrastructure, application, and Government teams. 

• Coordinate McAfee/Trellix agent deployment, upgrade, repair, removal, and replacement activities with Task 4 infrastructure personnel. 

• Support endpoint-remediation activities involving operating-system configurations, security policies, agents, signatures, content updates, and approved software. 

• Confirm that endpoints receive required policies, signatures, content, and product updates. 

• Validate endpoint compliance following remediation, configuration changes, maintenance, or agent deployment. 

• Track endpoint-security findings, assigned owners, corrective actions, dependencies, deadlines, and closure evidence. 

• Support vulnerability remediation associated with endpoint-security configurations, agent health, or protection status. 

• Collect and maintain logs, screenshots, reports, configuration information, and other evidence supporting remediation and compliance. 

• Create and update incident, problem, change, and remediation tickets in the designated workflow platform. 

• Support cybersecurity incident reporting by gathering relevant endpoint data, event details, logs, timelines, and investigative evidence. 

• Escalate significant events, persistent policy failures, widespread agent-health issues, and unresolved compliance deficiencies. 

• Coordinate with system administrators and asset-management personnel to reconcile endpoint records, agent status, and authoritative inventories. 

• Support security-control testing and provide endpoint-security evidence for RMF, ATO, ATC, audit, and inspection activities. 

• Develop endpoint-security compliance reports, agent-health summaries, event metrics, trend analyses, and briefing materials. 

• Maintain endpoint-security procedures, configuration documentation, standard operating procedures, troubleshooting guides, and technical knowledge articles. 

• Recommend technical and process improvements that strengthen endpoint protection, agent health, monitoring, and compliance reporting. 

Qualifications

Required Qualifications 

• Active Secret clearance or higher. 

• Bachelor’s degree in Cybersecurity, Information Systems, or a related field. 

• Minimum of 7 years of relevant cybersecurity, endpoint-security, information-assurance, or information-security experience. 

• Current CompTIA Security+ certification. 

• Hands-on experience administering or supporting McAfee endpoint-security technologies. 

 

Preferred Qualifications 

• Experience supporting DoD Endpoint Security Solutions in an enterprise environment. 

• Experience with McAfee or Trellix ePolicy Orchestrator, Endpoint Security, McAfee Agent, threat-prevention modules, firewall policies, and web-control capabilities. 

• Experience monitoring and remediating unhealthy, inactive, noncommunicating, or noncompliant endpoint agents. 

• Experience troubleshooting agent deployment, policy enforcement, signature updates, content distribution, and endpoint-protection failures. 

• Experience analyzing endpoint-security events, alerts, logs, dashboards, and compliance reports. 

• Experience coordinating endpoint remediation with infrastructure, desktop-support, network, application, and cybersecurity teams. 

• Familiarity with Host Based Security System technologies or legacy McAfee capabilities used within DoD environments. 

• Experience supporting cybersecurity incident analysis, evidence collection, escalation, and reporting. 

• Knowledge of the DoD Risk Management Framework, NIST SP 800-53 controls, DISA Security Technical Implementation Guides, and applicable DoD endpoint-security requirements. 

• Experience providing technical evidence for ATO, ATC, security-control assessment, audit, or inspection activities. 

• Familiarity with ACAS or Tenable, STIG Viewer, SCAP tools, eMASS, ServiceNow, or comparable cybersecurity and workflow platforms. 

• Experience reconciling endpoint-agent status with configuration-management or asset-inventory records. 

• Experience developing endpoint-compliance reports, agent-health metrics, event trends, and remediation dashboards. 

• Additional certifications such as CySA+, CASP+, CISSP, Trellix product certifications, or equivalent cybersecurity credentials. 

• Familiarity with current DoD 8140 cybersecurity workforce qualification requirements. 

• Strong troubleshooting, analytical, documentation, communication, and cross-functional coordination skills. 

• Ability to manage multiple endpoint-security events, remediation activities, and technical dependencies in a structured enterprise environment. 

Our Equal Employment Opportunity Policy

• EEO and Affirmative Action Policy: DecisionPoint Corporation is an Equal Employment Opportunity and Affirmative Action employer. It is the policy of DecisionPoint Corporation to provide equal employment opportunity in accordance with all applicable Equal Employment Opportunity/Affirmative Action laws, directives and regulations to all employees and qualified applicants without regard to race, ethnicity, color, religion, national origin, sex, age, disability status, pregnancy, sexual orientation, gender identity, genetic information, protected veteran status, or any other protected status under Federal, State or Local laws.
• Pay Transparency Policy: In accordance with Presidential Executive Order 13665, DecisionPoint Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.
• Authorization to Share Resume and Personal Information: By expressing your interest and submitting your resume for this position, you authorize DecisionPoint Corporation to share your resume, as well as personal information included on the resume, with its subsidiaries, affiliates and teaming partners for the purpose of considering you for this position and other available positions requiring comparable skills, education and experience. Should DecisionPoint Corporation. or its affiliates and teaming partners wish to initiate pre-employment discussions, you will be asked to complete an employment application and related employment documents.