Applications Engineer IV (EDR)

Applications engineer positions must provide reasonable accommodations for applicants with disabilities. If you are unable to complete this application due to a disability, contact the employer to discuss an alternative application process. Applications Engineer IV (EDR) Annapolis Junction, MD, United States Recruitment: 5 days ago | Requisition ID: 3383 Quevera is seeking an Applications Engineer IV to join our team. You will work alongside industry experts, tackle exciting challenges, and have the creative freedom to build cutting‑edge solutions while advancing your career in a collaborative environment. Benefits Medical/Dental/Vision – 100% Employer Paid Medical Plan Short/Long Term Disability – Employer Paid Life Insurance – Employer Paid Annual $5,000 toward education, training, or certification Employer paid Company Vacation Package for you and a guest 401(k) match up to 6% with an additional 4% profit sharing Requirements Must have a current TS/SCI with Polygraph clearance to apply for this role. Only candidates with this clearance will be considered. Duties and Responsibilities Deploy, configure, test, manage, and optimize endpoint detection and response (EDR) solutions across the NSA enterprise. Establish comprehensive Standard Operating Procedures (SOPs) for EDR functionalities and lead training sessions to empower SOC analysts. Lead the deployment, testing, management, and optimization of EDR capabilities in traditional on‑premises and cloud environments. Support SOC functions, including monitoring, training analysts, documenting SOPs, and incident response coordination. Required Experience EDR Solutions – Proficient in Trellix HX/EDRF or Microsoft Defender for Endpoint (preferably both). Cloud Applications – Experience with AWS or Azure (preferably both). Cloud Security – Securing cloud‑hosted workloads using EDR solutions and understanding cloud‑native security controls and logging (e.g., Microsoft Sentinel, Defender, Purview, AWS CloudWatch, CloudTrail, GuardDuty, or Security Hub). Security Operations Center (SOC) Support – Experience supporting SOC functions, including monitoring, training analysts, SOP documentation, incident response coordination, and security event analysis. Network Security – Understanding of network protocols, traffic analysis, and intrusion detection systems. CompTIA Security+ required. Windows Forensics – In‑depth knowledge of Windows operating system internals, registry, and file system. Familiarity with forensic tools such as EnCase, FTK, or open‑source alternatives. SANS Windows Forensic Analysis (FOR500) or equivalent expertise. Certifications – CCSP Certified Cloud Security Professional or equivalent; Microsoft Certified: Security Operations Analyst Associate (SOAA) or equivalent; CompTIA Security+. Desired Experience Threat Hunting – Proactive identification and investigation of potential security threats and anomalies. Incident Response – Experience managing, containing, eradicating, and recovering from security incidents. Security Information and Event Management (SIEM) – Familiarity with SIEM systems for log analysis and correlation (e.g., Splunk, Elastic, Microsoft Sentinel). Scripting and Automation – Proficiency in scripting languages such as PowerShell or Python for automating tasks and workflows. CISSP (Certified Information Systems Security Professional). Quevera is an equal‑opportunity affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law. #J-18808-Ljbffr Quevera-LLC