Endpoint Security Engineer

RISA is seeking a Senior Endpoint Security Engineer to engineer and sustain enterprise endpoint security platforms for an Intelligence Community customer. In this onsite role in St. Louis, MO , you will design, configure, install, and maintain endpoint security capabilities using tools such as Trellix (HBSS) , Tanium , and Carbon Black .

The position also emphasizes operational readiness through sustainment, policy management, incident reporting, and follow-on corrective actions. You will collaborate with vendors and the customer to research, analyze, and implement enterprise-wide improvements and to help shape secure architectures aligned with DoD guidance.

What you'll do

• Provide engineering and sustainment support for enterprise endpoint security solutions.
• Design endpoint security configurations, perform direct installations, and define, document, and enforce system standards.
• Configure and install security products on Linux .
• Partner with vendors and the customer to research, analyze, and implement enterprise-wide security capabilities.
• Recommend hardware, software, and implementation approaches sized for current and future capacity.
• Support the design, analysis, testing, and implementation of secure architectures.
• Oversee sustainment and advanced configuration, including policy management , database administration , and security management tools .
• Lead reporting, documentation, and investigation of security incidents, including corrective measures.

What you bring

• U.S. citizenship and an active TS/SCI .
• Ability to obtain and maintain a Government polygraph after hire.
• Bachelor's degree in Engineering, Computer Science, or a related field, plus 10 years of technical experience in cybersecurity (additional experience may be considered in lieu of a degree).
• Current DoD / -M IAT Level II certification, and CSSP Infrastructure Support within 6 months of hire.
• Working knowledge of enterprise endpoint security tools, including HBSS (Trellix) , Carbon Black Response/Protection , Microsoft ATA , and Tanium (all or some).
• Strong working knowledge of administering applications in a Linux environment.
• Experience on large-scale enterprise or global networks in a high-paced, diverse environment.
• Experience aligned to DoD Architecture Framework and related DoD network architecture and strategic planning instructions.
• Experience planning, designing, and evaluating security systems and architectures, including reporting to senior management and customers.

Tools and technologies

• Trellix (HBSS)
• Tanium
• Carbon Black Response/Protection
• Microsoft ATA
• Linux
• DoD Architecture Framework

Benefits and work details

• Medical, dental, and vision insurance
• 401(k) and Roth
• Paid Time Off
• 11 paid Federal Holidays

• Location: St. Louis, MO (onsite)
• Employment type: Full time, Exempt
• Clearance required to start: Active TS/SCI (U.S. citizenship required)
• Travel: Up to 10% (local)
• Salary range: $101,000 - $111,000 per year

Nice to have

• CSSP Infrastructure Support certification already in hand
• Linux certifications
• Windows enterprise Active Directory architecture and VMware virtualization