Endpoint Security Engineer – Hybrid Multi-Cloud

Job not on LinkedIn

🔥 0 minutes ago

🌲 North Carolina, Minnesota, +1 more states – Remote

🌲 North Carolina – Remote ❄️ Minnesota – Remote ⚔️ Virginia – Remote

💵 $96.6k - $130.7k / year

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

General Dynamics Information Technology

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1954

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

General Dynamics Information Technology is a company at the forefront of technological innovation, offering a wide range of services including consulting, digital modernization, and application services. The company is heavily involved in implementing solutions related to artificial intelligence, cloud computing, cybersecurity, high-performance computing, and quantum technologies. GDIT is committed to supporting government and defense sectors, providing mission-critical services such as logistics and supply chain management, intelligence, and homeland security. The company also focuses on diverse and inclusive hiring practices and actively promotes employee well-being. Through its digital accelerator solutions and pioneering use of emerging technologies, GDIT aims to propel agencies' missions forward and address complex technological challenges.

📋 Description

• Design, deploy, and operationalize behavior-based endpoint detection and response capabilities across a large operational fleet • Engineer, deploy, and maintain NGAV and EDR/XDR agents such as CrowdStrike Falcon, Microsoft Defender for Endpoint, and SentinelOne • Implement behavioral protections against zero-day malware, living-off-the-land binaries, fileless execution, and credential dumping • Partner with application owners and business units to establish baseline behavior profiles • Manage allowlisting, exception workflows, and phased canary, pilot, and production deployments • Serve as endpoint security escalation lead for SOC analysts during high-severity threat detection and response events • Serve as endpoint operations escalation lead for IT administrators during high-impact investigations and remediation • Perform host forensics, process-tree reconstruction, memory analysis, and script-based live remediation • Extend endpoint security standards across VMware/Nutanix virtualization and AWS, Azure, GCP, and containerized workloads • Measure and test security control efficacy using breach-and-attack simulation tools and Purple Team exercises • Track and report agent health, tamper resistance, telemetry integrity, and coverage metrics aligned with asset management systems • Support the United States Postal Service (USPS) mission

🎯 Requirements

• Bachelor's Degree in Computer Science or related technical discipline preferred but not required • If lacking a relevant college degree, an additional 4 years of relevant work experience is required • 8+ years of progressive experience in technical cybersecurity engineering or infrastructure security roles • 3–5 years of experience directly engineering and administering enterprise-grade EDR/XDR platforms across 50,000+ endpoints in a distributed hybrid environment • Demonstrated experience supporting active SOC investigations and collaborating cross-functionally with system owners in large-scale enterprise environments • Expert-level proficiency administering enterprise-scale endpoint platforms across Windows, macOS, Linux distributions, and container runtime environments • Deep mastery of process lineage, behavioral IOAs, Sysmon telemetry, and detection authoring using SQL, KQL, Splunk SPL, or YARA • Deep understanding of Windows/Linux kernel architectures, API hooking, hypervisor isolation, and multi-cloud workload identity integrations • Strong programming/scripting abilities in PowerShell, Python, or Bash • Fluency applying AI/ML technologies and analytics platforms including Splunk, Databricks, and Elastic • Ability to obtain and maintain a Public Trust clearance and pass a government background screening process • U.S. residency requirement; selected candidates must meet USPS residency/travel-history requirements for the last five years • Less than 10% travel required

🏖️ Benefits

• 401K with company match • Comprehensive health and wellness packages • Internal mobility team dedicated to helping you own your career • Professional growth opportunities including paid education and certifications • Cutting-edge technology you can learn from • Paid vacation and holidays • Medical plan options, some with Health Savings Accounts • Dental plan options • Vision plan options • Flexible work weeks where possible • Paid sick and personal time • Paid parental, military, bereavement, and jury duty leave • Up to 160 hours of paid family leave in a rolling 12-month period for eligible employees • Short- and long-term disability benefits • Life insurance • Accidental death and dismemberment insurance • Personal accident insurance • Critical illness insurance • Business travel and accident insurance