Endpoint Security Engineer

Endpoint Security Engineer The Opportunity Implement and maintain endpoint security solutions, including application control, next‑generation antivirus, privilege management, and vulnerability remediation. Assist with and enforce policies for device compliance and secure configurations. Monitor endpoint and client health, investigate incidents, and provide timely resolution. Collaborate with security and infrastructure teams to align endpoint strategy with organizational goals. Document processes, configurations, and standards to ensure consistency and audit readiness. Due to the nature of work performed within this facility, U.S. citizenship is required. You Have Experience with Windows, macOS, Mobile, or Linux and scripting languages Experience building automation workflows with API Experience with enterprise management tools such as Intune, SCCM, and Jamf Pro Knowledge of endpoint security practices, including application control, antivirus and EDR, patching, privilege management, Conditional Access, and vulnerability mitigation Knowledge of network security fundamentals and integration with endpoint protection Bachelor’s degree CISSP, CEH, or CompTIA Security+ Certification Nice If You Have Experience with Microsoft Entra and Active Directory Experience with Privilege Management tools such as BeyondTrust Experience with Application Control tools such as Airlock Experience with Next‑Gen AV, DLP, and EDR such as CrowdStrike or Trellix Experience patching operating systems and applications Knowledge of Conditional Access policies and rules Knowledge of ServiceNow and Microsoft Teams for project management and tracking Possession of excellent troubleshooting, analytical, and communication skills Compensation Salary is determined by factors such as location, education, skills, experience, and contractual requirements. The projected compensation range for this position is $69,400.00 to $158,000.00 (annualized USD). Benefits include health, life, disability, financial, and retirement plans; paid leave; professional development; tuition assistance; work‑life programs; and dependent care. Awards are recognized for exceptional performance. Work Model Our people‑first culture prioritizes collaboration. Work may be remote, hybrid, or onsite depending on the role and leadership expectations. Remote: may still require occasional onsite work at a Booz Allen or customer facility. Hybrid: expected to work from a Booz Allen facility frequently, with possible customer visits. Onsite: primarily performed at a Booz Allen office or customer facility. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law. #J-18808-Ljbffr