Endpoint Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 18%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Dragonfli Group

WebsiteLinkedInAll Job Openings

11 - 50 employees

🔒 Cybersecurity

💼 Consulting

Cybersecurity • Consulting

Dragonfli Group is a Washington, DC based LLC specializing in management and technology consulting. The company transforms its clients’ businesses by leveraging high impact strategic planning and technology solutions coupled with expertise in infrastructure, corporate strategy, and operations. Dragonfli Group’s passionate and experienced consultants take a collaborative approach to provide strategic planning and information security solutions to organizations looking to increase profitability, streamline operations, manage risk, meet regulatory demands, and build market share.

📋 Description

• Engineer, deploy, and maintain Next-Gen Antivirus (NGAV) and EDR/XDR agents across hundreds of thousands of heterogeneous endpoints • Implement active behavioral protections against zero-day malware, living-off-the-land binaries, fileless execution, and credential dumping • Partner with application owners and business units to establish baseline behavior profiles and minimize false positives • Manage allowlisting, exception workflows, and phased canary, pilot, and production deployments • Act as endpoint security escalation lead for SOC analysts and IT administrators during high-severity events • Provide tier-3/tier-4 technical escalation support during active investigations • Perform advanced host forensics, process-tree reconstruction, memory analysis, and script-based live remediation • Extend endpoint security standards across VMware/Nutanix virtualization and AWS, Azure, and GCP infrastructure • Validate control efficacy using automated attack simulation (BAS) tools and Purple Team exercises • Track and report agent health, tamper-resistance, telemetry integrity, and coverage metrics • Partner with application owners to tune policies and eliminate operational friction

🎯 Requirements

• 7+ years of progressive experience in technical cybersecurity engineering or infrastructure security roles • 3–5 years directly engineering and administering enterprise-grade EDR/XDR platforms across 50,000+ endpoints in a distributed hybrid environment • Expert-level proficiency administering EDR/XDR platforms across Windows, macOS, Linux, and container runtime environments • Deep understanding of behavioral IOAs, Sysmon telemetry, and detection authoring using SQL, KQL, Splunk SPL, or YARA • Strong scripting ability in PowerShell, Python, or Bash for fleet-wide remediation and automation • Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or equivalent practical experience • U.S. Citizenship or Permanent Residency required • Ability to work within the continental United States • Previous federal contracting experience preferred • GIAC Certified Enterprise Defender (GCED), GIAC Certified Incident Handler (GCIH), or GCFA preferred • CISSP preferred • Vendor credentials such as CrowdStrike Certified Falcon Administrator/Hunter or Microsoft SC-200 preferred • Prior experience supporting active SOC investigations in large-scale enterprise environments preferred • Fluency applying AI/ML tooling such as Splunk, Databricks, or Elastic preferred

🏖️ Benefits

• Medical — Multiple POS health plan options including an HSA-compatible plan • Dental — PPO coverage for preventive, basic, and major services • Vision — Annual exam, frames, lenses, and contact lens allowance • 401(k) — Employer match up to 5% of eligible compensation • Long-Term Disability — 100% employer-paid coverage at 50% of pre-disability earnings • Life Insurance & AD&D — 100% employer-paid coverage valued at $10,000 each • PTO — 15–25 days annually based on tenure • Paid Federal Holidays — All 11 federal holidays observed