Core4ce
Lead Endpoint Security Engineer
Core4ce, Alexandria, Virginia, us, 22350
Core4ce is hiring a Lead Endpoint Security Engineer (Hybrid). Make an impact implementing, integrating, and supporting Tanium Platform technologies in a DoD environment.Responsibilities
Lead and manage a team that performs cybersecurity efforts related to the Tanium Platform by providing hands-on Tanium platform support.Communicate effectively with government personnel and explain how Tanium interfaces with the environment.Implement required and/or newly acquired Tanium Modules to extend capabilities, such as Interact, Impact, Asset, Discover, Deploy, Comply, Patch, Threat Response, and Trend modules.Analyze and refine EDR detection rules to minimize false positives while maintaining a high level of security effectiveness.Configure and manage Discover and Connect modules to identify, manage, and maintain endpoints and allow information sharing.Work closely with team members on improving Tanium operational status across the enterprise.Address unmanaged Tanium endpoints, maintaining applicable maintenance windows for managed endpoints.Configure and manage trend boards and sources.Coordinate with teams to identify, configure, and manage intel for Indicators of Compromise (IoCs), following guidance as required by external authorities.Coordinate with IT teams and components to support Automated Continuous Endpoint Monitoring (ACEM).Coordinate and assist with cybersecurity reviews, including generation of security artifacts, implementation statements, standard operating procedures, POA&M, and CONOPS.Requirements
Active DoD Top Secret Clearance - Tier 5 Single Scope Background Investigation (SSBI)Active DoD 8570 IAT Level III certification (CASP+CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, or CCSP)Hands-on experience with Tanium modules (Interact, Impact, Asset, Discover, Comply, Patch, Threat Response, and Trend)5+ years working with Information Technology with a focus on Information Security
#J-18808-Ljbffr
Lead and manage a team that performs cybersecurity efforts related to the Tanium Platform by providing hands-on Tanium platform support.Communicate effectively with government personnel and explain how Tanium interfaces with the environment.Implement required and/or newly acquired Tanium Modules to extend capabilities, such as Interact, Impact, Asset, Discover, Deploy, Comply, Patch, Threat Response, and Trend modules.Analyze and refine EDR detection rules to minimize false positives while maintaining a high level of security effectiveness.Configure and manage Discover and Connect modules to identify, manage, and maintain endpoints and allow information sharing.Work closely with team members on improving Tanium operational status across the enterprise.Address unmanaged Tanium endpoints, maintaining applicable maintenance windows for managed endpoints.Configure and manage trend boards and sources.Coordinate with teams to identify, configure, and manage intel for Indicators of Compromise (IoCs), following guidance as required by external authorities.Coordinate with IT teams and components to support Automated Continuous Endpoint Monitoring (ACEM).Coordinate and assist with cybersecurity reviews, including generation of security artifacts, implementation statements, standard operating procedures, POA&M, and CONOPS.Requirements
Active DoD Top Secret Clearance - Tier 5 Single Scope Background Investigation (SSBI)Active DoD 8570 IAT Level III certification (CASP+CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, or CCSP)Hands-on experience with Tanium modules (Interact, Impact, Asset, Discover, Comply, Patch, Threat Response, and Trend)5+ years working with Information Technology with a focus on Information Security
#J-18808-Ljbffr