SITEC - Cyber Endpoint Security Systems Engineer - MacDill AFB
Peraton · MacDill AFB, FL, US
About this role
## Peraton — Cyber Endpoint Security Systems Engineer (SITEC) **Location:** MacDill AFB, Florida **Clearance:** DoD TS/SCI required --- ## Overview Peraton is a next-generation national security company supporting missions across the globe. This role supports the **Special Operations Command Information Technology Enterprise Contract (SITEC) – 3 EOM** under USSOCOM. The **Cyber Endpoint Security Systems Engineer** is responsible for the technical architecture, detection engineering, automated integration, platform modernization, and attack surface reduction across enterprise endpoint ecosystems. --- ## Responsibilities - **Architect, test, and deploy** resilient, high-availability enterprise endpoint security platform topologies (e.g., clustered databases, load-balanced agent handlers in DMZs and segmented cloud environments). - **Lead modernization initiatives**, including re-architecting legacy on-premises endpoint security infrastructure. - **Design and test migration paths** for legacy point products. - **Engineer multi-platform agent compatibility** across enterprise operating systems, microservices, containerized workloads, and non-persistent VDI environments. - Build **platform sizing/scalability models** (compute/storage), **network bandwidth throttles**, and **disaster recovery architectures** (RTO/RPO) for endpoint security management systems. - **Develop, test, and deploy detection-as-code** behavioral detection rules mapped to the **MITRE ATT&CK** framework. - Engineer **host-level Attack Surface Reduction (ASR) baselines**, including: - Windows Defender Application Control (WDAC) - Trellix Application Control / Solidcore execution control - Credential Guard - Exploit Guard - Linux kernel security modules (SELinux/AppArmor) - **Establish and govern policy lifecycle** for exclusions, behavioral suppression rules, and tamper-protection configurations. - **Design endpoint telemetry pipelines** to route high-fidelity endpoint events into SIEM and data lake environments (with the Cyber Analytics Systems Engineer). - **Operationalize threat intelligence** and hunt findings into durable, low-noise detection signatures and automated containment triggers. - Serve as **Tier 3 engineering escalation** for deep OS compatibility bugs, kernel panic/BSOD triage, memory leaks, and complex driver interaction issues. - Author **engineering specifications**, platform migration guides, detection-as-code CI/CD pipelines, and structured operational runbooks. --- ## Qualifications ### Required - **Min 12 years** with HS Diploma; **10 years** with AS/AA; **8 years** with BS/BA - **DoD TS/SCI clearance required** - **Security+** and **DoD 8140 compliant** under **Work Role Code 462** (Control Systems Security Specialist) — **Intermediate level or higher** ### Highly Desired - Endpoint Security Platform Management - Threat Detection & Analysis - Security Automation & Scripting - SIEM Integration & Optimization - Cloud Security Principles - Network & System Fundamentals - Compliance & Security Frameworks - Problem Solving & Troubleshooting - Technical Documentation - Continuous Learning & Adaptability --- ## Salary & Benefits - **Target Salary Range:** **$86,000 – $138,000** (varies by experience, education, location, and contract/business factors) - May be eligible for **overtime, shift differential, and discretionary bonus** (depending on position) - Benefits may include: **medical, dental, vision, life, HSA, disability, EAP, p
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.