{"id":3903386,"url":"https://alion.io/job/amentum-cyber-engineer-endpoint-security-mdx-ssfb","title":"Cyber Engineer – Endpoint Security MDX - SSFB","company":{"id":14861,"name":"Amentum","domain":"amentum.com","url":"https://alion.io/company/amentum","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":82,"open_postings":465,"ghost_share":0,"stale_share":0.912,"repost_share":0.002,"time_to_fill_p50_days":18,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Colorado Springs, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":155000,"max":175000,"currency":"USD","period":"year","gross":null,"usd_annual":175000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":true,"has_equity":true,"technologies":[{"name":"Elastic SIEM","optional":false},{"name":"ElasticSearch","optional":false},{"name":"Kibana","optional":false},{"name":"Linux","optional":false},{"name":"Logstash","optional":false},{"name":"Prisma Cloud","optional":false}],"status":"live","first_seen_at":"2026-11-06T00:00:00Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-13T18:00:29Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Position Title: Cyber Engineer - Endpoint Security\nLocation: Schriever Space Force Base, Colorado Springs, CO\nRelocation Assistance: None available at this time\nRemote/Telework: NO - Not available for this position\nClearance Type: DoW Top Secret w/ SCI Eligibility\nShift: Day shift\nTravel Required: Up to 10% of the time\n\nDescription of Duties:\nThe Cyber Engineer - Endpoint Security is part of Amentum’s Missile Defense Division and directly supports the Missile Defense Agency (MDA).\nWe are seeking a highly motivated, independent, and results-oriented Cyber Engineer - Endpoint Security to support the MDSEA Cyber Team. The ideal candidate thrives in a dynamic and challenging mission environment; takes ownership of endpoint-security engineering, administration, and sustainment activities; and can effectively balance daily operational requirements with modernization efforts.\nThis position is the primary endpoint-security engineering role supporting Elastic Defend. The selected candidate will work closely with cybersecurity, systems engineering, infrastructure, and mission stakeholders to administer, troubleshoot, document, and improve endpoint-security capabilities.\nThe successful candidate will be a collaborative technical contributor with strong analytical and critical-thinking skills. In addition to primary endpoint-security responsibilities, the individual may provide limited backup, surge, and project support to the Systems Engineering team for enterprise Elastic engineering efforts as mission priorities require. If you are passionate about leveraging your cybersecurity expertise to defend Department of War (DoW) networks and enhance our nation’s security, consider this position.\nResponsibilities\nYour primary focus will be endpoint-security engineering, operational sustainment, and modernization. Duties will include:\nEndpoint Security Engineering and Sustainment:\n· Administer, configure, maintain, troubleshoot, and sustain endpoint-security tools and services in support of mission systems and DoW cybersecurity requirements.\nElastic Defend Support:\n· Support endpoint-security operations using Elastic Defend, including configuration, policy management, agent deployment and health, alerting, troubleshooting, logging, reporting, and coordination with system owners and administrators.\nEndpoint Security Operations:\n· Investigate and resolve endpoint-security tool issues; support endpoint policy management, agent deployment and health, alerting, logging, reporting, and coordination with affected system owners and administrators.\nTechnical Documentation:\n· Develop and maintain endpoint-security engineering documentation, Standard Operating Procedures (SOPs), configuration baselines, implementation plans, troubleshooting guides, and sustainment artifacts.\nVulnerability and Compliance Support:\n· Coordinate with Cyber compliance, vulnerability-management, and system-administration personnel to support implementation of applicable cybersecurity requirements, directives, remediation actions, and continuous-monitoring activities.\nCross-Functional Collaboration:\n· Work with Cyber team leads, Information System Security Managers (ISSMs), system administrators, network engineers, and Systems Engineering personnel to ensure endpoint-security capabilities support mission, operational, and security requirements.\nSystems Engineering Support:\n· Provide backup, surge, and project-based support to the Systems Engineering team for enterprise Elastic engineering efforts, as mission priorities require.\n· Support may include technical coordination, configuration assistance, troubleshooting, documentation, integration activities, and designated implementation projects.\nThe successful candidate will:\n· Be able to develop clear technical documentation and communicate effectively with cybersecurity personnel, system administrators, engineers, management, and mission stakeholders.\nResumes, in month and year format, must be submitted with application in order to be considered for the position. The selected candidate may be assigned as an employee for one of our teammate companies.\n\nBasic Requirements:\n· Must have 8, or more, years of general (full-time) work experience\no May be reduced with completion of advanced education\n· Must have 6, or more, years of directly related experience\n· Must have 2, or more, years of experience working in a management or leadership role\n· Must have a current DoW 8570.01-M IAT Level II certification, such as CompTIA Security+.\n· Must have experience administering, configuring, troubleshooting, deploying, or sustaining enterprise endpoint-security tools in a DoW or similarly regulated environment.\n· Must have experience with cybersecurity processes, procedures, and tools used for endpoint protection, vulnerability management, monitoring, logging, or data correlation, such as Trellix ESS/ePO, ACAS, Elastic, ArcSight, or comparable technologies.\n· Must have an active DoW Top Secret Security Clearance with SCI eligibility\n\nDesired Requirements:\n· Have experience deploying, configuring, and using Elastic Kibana visualization dashboards to support cybersecurity monitoring, analysis, reporting, and operational awareness.\n· Have experience using and configuring Elastic Cloud features, including X-Pack capabilities such as security, alerting, monitoring, reporting, and role-based access controls.\n· Have experience developing, configuring, and customizing Elastic/ELK Stack components-including Elasticsearch, Logstash, and Kibana-to support enterprise monitoring, log aggregation, visualization, alerting, and cybersecurity operations.\n· Have hands-on experience with Elastic Defend, Elastic Security, Elastic Stack, Elastic Cloud Enterprise, or comparable enterprise security information and event-management or endpoint-detection-and-response capabilities.\n· Have experience supporting Prisma Cloud and container-security capabilities, including container and image vulnerability management, compliance monitoring, runtime protection, alerting, troubleshooting, and integration with enterprise cybersecurity monitoring processes.\n· Have a basic working knowledge of Linux operating systems, including command-line navigation, file and directory management, permissions, process and service monitoring, log review, package management, and basic troubleshooting.\n· Have experience with Trellix Endpoint Security Suite, Trellix ePolicy Orchestrator (ePO), Host-Based Security System (HBSS), or comparable endpoint-security management platforms.\n· Have experience supporting a cybersecurity-tool migration, endpoint-security platform transition, agent migration, policy conversion, testing, validation, or operational rollout.\n· Have familiarity with DoW cybersecurity operations, vulnerability management, DISA Cyber Tasking Orders (CTOs), Information Assurance Vulnerability Alerts (IAVAs), Security Technical Implementation Guides (STIGs), and continuous-monitoring activities.\n· Have familiarity with Risk Management Framework (RMF) processes, NIST SP 800-53 controls, security documentation, and Authority to Operate (ATO) sustainment activities.\n· Have 1, or more, advanced certifications: CompTIA CySA+, CASP+, CISSP, GIAC certifications, or other advanced DoW 8570-aligned certifications.\n· Have experience supporting enterprise engineering teams through technical integration, logging and telemetry onboarding, troubleshooting, implementation projects, or operational surge support.\n· Have the demonstrated ability to work independently, manage competing priorities, collaborate across technical teams, and support mission-critical operations.\nThis position will be posted for a minimum of 3 days. If a candidate has not been selected at that time, it will continue to be posted until a suitable candidate is selected or the position is closed.\nCompensation Details:\n$155,000 - $175,000The compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws.\nBenefits Overview:\nOur health and welfare benefits are designed to support you and your priorities. Offerings include:\nHealth, dental, and vision insurance\n\nPaid time off and holidays\n\nRetirement benefits (including 401(k) matching)\n\nEducational reimbursement\n\nParental leave\n\nEmployee stock purchase plan\n\nTax-saving options\n\nDisability and life insurance\n\nPet insurance\n\nNote: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits.\nOriginal Posting:\n11/06/2026 - 11/16/2026Amentum anticipates this job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs.\nAmentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low-income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law. Learn more about your rights under Federal laws and supplemental language at Labor Laws Posters.","description_format":"text","description_chars":9978,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Equity","Life insurance","Parental leave","Relocation assistance","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Endpoint Security","Vulnerability Management","Information Security","Facilities Management"],"lifecycle":[{"event":"open","at":"2026-11-07T01:42:54Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 4","filings_12m":4,"filings_prev_12m":5,"green_card_filings_12m":0,"median_offered_wage_usd":107500,"route":null,"cap_exempt":false,"checked_at":"2026-11-12T07:36:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.605,"p_room":0.9,"age_days":6,"expected_fill_days":18,"reasons":["conf:1","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-11-12T10:38:37Z"},"pay":{"stated_usd_annual":175000,"is_top_pay":true},"html_url":"https://alion.io/job/amentum-cyber-engineer-endpoint-security-mdx-ssfb","json_url":"https://alion.io/job/amentum-cyber-engineer-endpoint-security-mdx-ssfb.json","meta":{"generated_at":"2026-11-13T20:04:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":40019,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":14861},"rest":"https://alion.io/mcp/rest/get_company?id=14861"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Famentum-cyber-engineer-endpoint-security-mdx-ssfb"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Famentum-cyber-engineer-endpoint-security-mdx-ssfb"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Famentum-cyber-engineer-endpoint-security-mdx-ssfb"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/amentum-cyber-engineer-endpoint-security-mdx-ssfb\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Famentum-cyber-engineer-endpoint-security-mdx-ssfb"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3903386}},{"tool":"search_jobs","arguments":{"company":"amentum.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3903386},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}