End-Point Protection Engineer

Leidos

End-Point Protection Engineer providing senior engineering support for enterprise endpoint security across SEC ISS contract environment. Designing, implementing, and sustaining endpoint protection capabilities for Windows, macOS, and iOS endpoints.

Posted 6/2/2026full-timeRemote • 🇺🇸 United StatesSeniorLead💰 $87,100 - $157,450 per yearWebsite

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

endpoint protection strategiesMicrosoft Defender for EndpointMicrosoft Intunevulnerability managementendpoint patching strategiespolicy tuningsignature managementscheduled scansrisk assessmentremediation coordination

Soft Skills

collaborationleadershipcommunicationdocumentationreporting

Tools & Technologies

WindowsmacOSiOSworkstationserver platforms

Certifications & Qualifications

SEC Public Trust

Industry Keywords

enterprise endpoint securityregulated environmentsSOPsrunbookscompliance

Tech Stack

Tools & technologies

iOSMacOS

About the role

Key responsibilities & impact

Architect, implement, and maintain enterprise endpoint protection strategies across Windows, macOS, iOS, workstation, and server platforms.
Define, enforce, and continuously improve endpoint security baselines using Microsoft Defender for Endpoint and Microsoft Intune.
Lead deployment and configuration of antivirus and endpoint protection tooling, including policy tuning, signature/DAT update management, and scheduled scans.
Own endpoint patching strategy and execution across managed endpoint environments, including supersedence management.
Monitor vulnerability findings, assess risk and severity, and coordinate remediation with technical teams and system owners.
Monitor endpoint security telemetry and respond to endpoint-specific threats, suspicious activity, and policy non-compliance.
Collaborate with federal stakeholders, ISS teams, and partner vendors to validate endpoint security posture and operational readiness.

Requirements

What you’ll need

8+ years of experience in enterprise endpoint security engineering in large, regulated environments.
Advanced experience designing, implementing, and managing Microsoft Defender for Endpoint and Intune security baselines.
Hands-on experience in vulnerability management, endpoint patching strategies, supersedence processes, and POA&M resolution.
Experience documenting SOPs/runbooks and providing compliance-focused reporting to federal stakeholders.
Must meet contract requirements for Citizenship/Work Authorization; ability to obtain and maintain SEC Public Trust (or higher if required).
Bachelors in a relevant field (e.g., Information Technology, Computer Science, Engineering).

Benefits

Comp & perks

Health and Wellness programs
Income Protection
Paid Leave
Retirement