View all jobs

Security Systems Engineer

  • Washington, DC

Company Description

Our Client is a top-rated cyber security firm that is passionate about providing excellent service to our clients, both government and commercial. They have a collaborative environment that encourages creativity, growth, and community, which allows you to have the opportunity to initiate and contribute to challenging projects, while continuing to grow in your professional career. Bring your creativity, innovation, and your relentless focus on customer service and join a cyber security team at its best!

About the Role

  • Location: Naval Support Facility Anacostia (Joint Base Anacostia-Bolling / JBAB), Washington, D.C. (100% On-Site)
  • Security Clearance: Active Top Secret / SCI (TS/SCI) Required; must be eligible to obtain and maintain Presidential Support Duty (PSD) / Yankee White
  • Pay Range: $150,000.00 – $165,000.00 per year (commensurate with experience)
  • Work Schedule: Monday – Friday, Standard Business Hours
  • Employment Type: Full-Time, Permanent

Our client is seeking a mid-level Security Systems Engineer (3–7 years experience) to manage, secure, and modernize critical security infrastructure supporting the White House Communication Agency (WHCA) and the White House Military Office (WHMO) network. Operating in a high-consequence, zero-fail environment, you will oversee host defense, systems tuning, and continuous monitoring across multi-site Windows and Red Hat Enterprise Linux (RHEL) platforms. Your primary focus will center on full-lifecycle McAfee ePolicy Orchestrator (ePO) / Host Based Security System (HBSS) administration, DISA STIG policy enforcement, host intrusion detection, and system availability.

Core Responsibilities:

  • Enterprise HBSS/ePO Administration: Manage, configure, and maintain McAfee ePO and associated point products across the WHMO network, including McAfee Agent, Host Intrusion Prevention System (HIPS), Rogue Sensor Detection (RSD), Policy Auditor (PA), and Data Loss Prevention (DLP).

  • HIPS Policy & Firewall Engineering: Design, test, and deploy HIPS exceptions, firewall policies, and intrusion prevention rules to protect host assets without breaking mission application functionality.

  • Telemetry, SQL & Security Reporting: Develop, run, and optimize custom SQL queries and HBSS dashboards to surface "Interesting Events," rogue devices, and agent compliance metrics for incident responders and Information Assurance leadership.

  • Infrastructure Engineering & Hardening: Maintain, patch, and tune Windows Server and Red Hat Enterprise Linux (RHEL) operating systems to meet DISA STIGs, IAVA mandates, and vendor release standards.

  • Incident Triage & Monitoring: Analyze security event logs, investigate agent communication failures, and collaborate with front-line Computer Network Defense (CND) analysts to triage network and host threats.

  • Documentation & Training: Author and maintain system configuration guides, standard operating procedures (SOPs), HIPS exception documentation, and deliver technical training to operational personnel.

Required Qualifications:

  • Active Clearance: Fully active U.S. Government Top Secret / SCI (TS/SCI) clearance. Must be eligible and willing to successfully complete Presidential Support Duty (PSD) / Yankee White vetting prior to contract start.

  • Experience: 3 to 7 years of hands-on experience in security systems engineering, DoD infrastructure administration, or host defense operations.

  • Mandatory Certification: Active DoD 8570 CNDSP Infrastructure Support certification at time of application (CEH or SSCP required; no post-hire grace periods).

  • HBSS Training: Documented completion of official HBSS 201 (Basic) and HBSS 301 (Advanced) training courses.

  • Host Defense Tooling: Demonstrated proficiency managing and troubleshooting McAfee ePO modules (McAfee Agent, HIPS, RSD, PA, DLP) in an enterprise environment.

  • Operating Systems: Practical administration and security hardening experience in both Red Hat Enterprise Linux (RHEL) via CLI and Windows Server environments.

  • Regulatory Compliance: Working knowledge of DISA STIGs, DoD IA/CND policies, and Change Control Board (CCB) operational processes.

  • Availability: Ability to work 100% on-site at Naval Support Facility Anacostia (Joint Base Anacostia-Bolling / JBAB) in Washington, D.C. during core business hours (no remote/telework options).

Preferred Qualifications:

  • Prior or active Presidential Support Duty (PSD) / Yankee White adjudication.

  • Red Hat Certified System Administrator (RHCSA) certification.

  • Microsoft Certified IT Professional (MCITP) or equivalent modern Windows Server credential.

  • Hands-on experience writing automation scripts (Bash, Python, or PowerShell) for endpoint management.

  • Bachelor’s Degree in Cybersecurity, Computer Science, Information Technology, or a related field

<meta />