{"id":2766993,"url":"https://alion.io/job/leidos-vulnerability-management-and-endpoint-security-administrator","title":"Vulnerability Management and Endpoint Security Administrator","company":{"id":7791,"name":"Leidos","domain":"leidos.com","url":"https://alion.io/company/leidos","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":241,"ghost_share":0.004,"stale_share":0.855,"repost_share":0.008,"time_to_fill_p50_days":27,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Leadership","role_family":"Leadership","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Fort Belvoir, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":87100,"max":157450,"currency":"USD","period":"year","gross":null,"usd_annual":157450},"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Linux","optional":false},{"name":"Nessus","optional":false},{"name":"Tanium","optional":false},{"name":"Windows","optional":false},{"name":"Microsoft Defender","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"Red Hat","optional":true},{"name":"SQL","optional":true}],"status":"live","first_seen_at":"2026-10-07T00:00:00Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-22T02:56:46Z","board_verified":true,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"Leidos is seeking a Vulnerability Management and Endpoint Security Administrator to provide cybersecurity expertise supporting large-scale migration and operations on a high-profile Department of War (DoW) contract. The I3TS program provides enterprise-wide IT support to enable the Defense Threat Reduction Agency’s Information Management & Technology Directorate to consolidate, modernize, and continuously improve delivery of IT services and mission capabilities to internal and external mission partners operating in CONUS and OCONUS locations.\nThe selected candidate will serve as a cybersecurity subject matter resource across the Vulnerability Management and Endpoint Security teams and will exercise independent judgment in analyzing cybersecurity risks, determining remediation priorities, evaluating technical solutions, and recommending courses of action affecting enterprise endpoints and infrastructure.\nThe role requires strong technical expertise with ACAS/Nessus and Tanium, along with working knowledge of Trellix endpoint-security technologies. The candidate will independently evaluate complex vulnerability and endpoint-security issues, assess operational and mission impacts, and develop recommendations that balance cybersecurity requirements, technical feasibility, and operational objectives.\nPrimary Responsibilities:\nIndependently analyze enterprise vulnerability and endpoint-security posture across Windows, Linux, virtual, and other enterprise environments and recommend technical and risk-based courses of action.\nAdminister and optimize Assured Compliance Assessment Solution (ACAS)/Nessus vulnerability-management capabilities, including scan architecture, policies, credentialed scanning, analysis, reporting, and technical troubleshooting.\nPerform in-depth vulnerability and risk analysis; validate findings; assess technical, operational, and mission impacts; establish risk-based remediation priorities; and recommend remediation strategies to system owners and technical leadership.\nExercise independent technical judgment in evaluating vulnerabilities, compensating controls, remediation alternatives, exceptions, and cybersecurity risks.\nLeverage Tanium capabilities to analyze endpoint visibility, asset inventory, compliance, vulnerability exposure, configuration posture, and remediation requirements across the enterprise.\nAnalyze endpoint-security posture using Trellix and associated technologies; investigate security alerts, policy issues, configuration deficiencies, agent-health concerns, and other conditions requiring technical evaluation.\nCorrelate vulnerability, endpoint, asset-inventory, compliance, and security-tool data to identify systemic security risks, coverage gaps, unmanaged assets, trends, and enterprise remediation priorities.\nDevelop and recommend technical solutions for complex vulnerability-management and endpoint-security issues, considering cybersecurity risk, system dependencies, operational requirements, and mission impact.\nEvaluate vulnerability exceptions and risk-acceptance requests and provide technical risk assessments and recommendations to cybersecurity, technical, and program leadership.\nAnalyze endpoint configurations and security baselines and recommend security-hardening strategies consistent with Security Technical Implementation Guides (STIGs), applicable security controls, and operational requirements.\nDevelop vulnerability-management metrics, dashboards, risk analyses, trend reporting, and executive-level summaries that enable leadership to make informed cybersecurity and risk-management decisions.\nProvide cybersecurity expertise during incident-response, threat-hunting, and endpoint-containment activities and independently assess appropriate technical actions when vulnerabilities or malicious activity are identified.\nEvaluate proposed changes to endpoint architectures, configurations, software, security tooling, and infrastructure; determine cybersecurity and operational impacts; identify alternatives; and provide technical recommendations to leadership.\nAnalyze and recommend improvements to vulnerability-management and endpoint-security processes, controls, technologies, and operating procedures to increase effectiveness, reduce cybersecurity risk, and improve enterprise security posture.\nDevelop technical standards, procedures, methodologies, process documentation, and knowledge articles governing vulnerability-management and endpoint-security activities.\nServe as a technical advisor to system owners, engineers, cybersecurity personnel, and program leadership regarding vulnerability-management and endpoint-security risks, priorities, and remediation strategies.\nManage competing cybersecurity priorities and independently determine appropriate technical approaches within established program, contractual, and security requirements.\nWork effectively in a fast-paced environment requiring independent decision-making across short-, mid-, and long-term cybersecurity and remediation objectives.\nBasic Qualifications:\nBachelor’s degree and 4+ years of relevant cybersecurity, vulnerability management, endpoint security, systems administration, information assurance, or related technical experience; or 8+ years of relevant experience in lieu of a degree.\n4+ years of progressively responsible experience performing vulnerability management, endpoint security, cybersecurity engineering, or information-assurance functions within an enterprise environment.\nDemonstrated ability to independently analyze complex cybersecurity vulnerabilities, assess technical and operational risk, evaluate alternative remediation strategies, and recommend appropriate courses of action.\nStrong hands-on expertise with ACAS/Nessus, including vulnerability scanning, scan-policy administration, credentialed-scan troubleshooting, vulnerability analysis, reporting, remediation strategy, and closure validation.\nStrong hands-on expertise with Tanium for endpoint visibility, asset inventory, endpoint management, compliance analysis, vulnerability remediation, and enterprise security assessment.\nWorking knowledge of Trellix endpoint-security technologies, including the ability to assess endpoint-security posture, investigate alerts and policy issues, evaluate configurations, and recommend corrective actions.\nExperience conducting risk-based vulnerability analysis and developing remediation priorities based on vulnerability severity, threat information, system criticality, operational impact, and available compensating controls.\nExperience administering, securing, analyzing, or engineering Microsoft Windows and Linux endpoint environments.\nWorking knowledge of STIG compliance, SCC, STIG Viewer, secure configuration baselines, security-hardening methodologies, and cybersecurity control implementation.\nUnderstanding of NIST, ICD, CNSS, and DoD information-assurance and cybersecurity standards and the ability to interpret and apply requirements to enterprise technical environments.\nAbility to evaluate complex technical information, identify cybersecurity implications, and communicate risk-based recommendations to technical and program leadership.\nMust meet DoD 8570.01-M Information Assurance Technical (IAT) Level II baseline certification requirements. Acceptable certifications include CompTIA Security+ CE or a higher-level certification satisfying the IAT Level II requirement. Must also meet applicable DoD 8140 Cyberspace Workforce Qualification Program requirements for assigned DoD Cyber Workforce Framework work role(s), as required by the contract and customer.\nMust possess and maintain an active Top Secret/Sensitive Compartmented Information (TS/SCI) clearance.\nStrong written, verbal, analytical, organizational, and problem-solving skills.\nDemonstrated ability to exercise independent judgment, manage competing priorities, develop technical recommendations, and work effectively within a cross-functional Vulnerability Management and Endpoint Security team.\nPreferred Qualifications:\nAdvanced Tanium expertise, including Tanium Asset, Discover, Comply, Deploy, Patch, Interact, Reporting, and/or custom question and sensor development.\nAdvanced ACAS/Nessus expertise, including scanner architecture and deployment, scan-policy development and administration, credentialed-scan troubleshooting, dashboard development, large-scale remediation analysis and reporting, and Linux backend troubleshooting.\nExperience with Trellix ePolicy Orchestrator, Trellix Endpoint Security, Microsoft Defender for Endpoint, or comparable endpoint detection and response platforms.\nPast or current Information System Security Officer (ISSO), Information System Security Manager (ISSM), cybersecurity engineer, or comparable information-assurance experience.\nExperience supporting DoW networks, classified environments, or large-scale enterprise cybersecurity operations.\nExperience designing vulnerability-management dashboards, automated reporting solutions, or data integrations using PowerShell, Python, SQL, or similar scripting and automation technologies.\nExperience evaluating vulnerability exceptions, risk-acceptance requests, Plans of Action and Milestones (POA&Ms), compensating controls, and remediation-governance decisions.\nExperience advising technical or program leadership on cybersecurity risk, vulnerability remediation strategies, security architecture, or endpoint-security decisions.\nMicrosoft and/or Linux certifications, such as Microsoft Certified Solutions Expert, Red Hat Certified System Administrator, CompTIA Linux+, or equivalent.\nIf you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.\nOriginal Posting:\nOctober 7, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.\nPay Range:\nPay Range $87,100.00 - $157,450.00The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.","description_format":"text","description_chars":10664,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management","C4ISR"],"lifecycle":[{"event":"open","at":"2026-10-17T04:26:40Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 50 · green card filings: 24","filings_12m":50,"filings_prev_12m":58,"green_card_filings_12m":24,"median_offered_wage_usd":124257,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.602,"p_room":0.9,"age_days":15,"expected_fill_days":27,"reasons":["conf:3","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":{"stated_usd_annual":157450,"is_top_pay":true},"html_url":"https://alion.io/job/leidos-vulnerability-management-and-endpoint-security-administrator","json_url":"https://alion.io/job/leidos-vulnerability-management-and-endpoint-security-administrator.json","meta":{"generated_at":"2026-10-22T09:28:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6285,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7791},"rest":"https://alion.io/mcp/rest/get_company?id=7791"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fleidos-vulnerability-management-and-endpoint-security-administrator"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fleidos-vulnerability-management-and-endpoint-security-administrator"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fleidos-vulnerability-management-and-endpoint-security-administrator"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/leidos-vulnerability-management-and-endpoint-security-administrator\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fleidos-vulnerability-management-and-endpoint-security-administrator"}]}