Endpoint Security Administrator

HonorVet Technologies (SDVOSB) is a certified veteran-owned staffing and workforce solutions company recognized for its industry certifications, commitment to quality talent acquisition, and excellence in delivering IT, healthcare, federal, state, and SLED (State, Local, and Education) staffing services, helping organizations build reliable, compliant, and high-performing teams across mission-critical sectors.

Title: Endpoint Security Administrator
Location: Remote
Duration: 12 Months

Position Description     

• An Information Security Specialist interprets information security policies, standards and other requirements as they relate to internal information system and coordinates the implementation of these and other information security requirements.
• The Information Security Specialist redesigns and reengineers internal information handling processes so that information is appropriately protected from a wide variety of problems including unauthorized disclosure, unauthorized use, inappropriate modification, premature deletion, and unavailability.
• The Information Security Specialist will provide highly specialized experience in one or more information, computer, or network security disciplines (e.g. penetration testing, accreditation, or risk assessment and mitigation); develop system security plans, certification and accreditation reviews; analyze and establish processes for comprehensive systems and data protection; assess and mitigate system security threats and risks; perform security audits, evaluation, risk assessments and make a strategic recommendations; and manages, supports, installs and maintains security tools and systems, and tracks security patches and incidents.         

 

Skills Required 

The Information Security Specialist will possess knowledge and experience in standard methodologies used in certification and accreditation processes; extensive experience following NIST guidelines in risk assessment and management; conducting vulnerability analysis; developing mitigation plans; and performing penetration testing, password protection testing and application security testing. 

 

Additional Skills Required          

• Possess knowledge with Endpoint and Data Protection products such as CrowdStrike Falcon Endpoint Security, Falcon SaaS Security, Falcon Exposure Management, Falcon Data Protection, Falcon Recon, Fusion SOAR Ability to generate reports using APIs.
• Demonstrate mastery in operating and optimizing the Falcon platform. Possess knowledge of parent and child CIDs in the CrowdStrike environment.
• Ability to generate reports using APIs as a CrowdStrike Falcon administrator.
• Demonstrate mastery in operating and optimizing the Falcon platform.
• Demonstrate mastery in threat hunting using CrowdStrike and Microsoft Defender Possess knowledge with Armis and Axonius.       

 

Experience Required     

• This classification must have a minimum of five (5) years of experience applying security policies, standards, testing, modification and implementation.
• At least three (3) years of that experience must be in information security analysis.    

 

Additional Experience Required

• Minimum five (5) years of working experience in the last 7 years serving as an organization’s subject matter expert responsible for the management of CrowdStrike Falcon.
• Minimum five (5) years of working experience in the last 7 years administering CrowdStrike endpoint security for Prevention Policies, creating IOA exclusions, USB Device Control, Firewall, and creating Fusion SOAR workflows.
• Minimum five (5) years of working experience in the last 7 years with malware, threat intelligence and/or sandbox analysis
• Minimum seven (7) years of working experience with vulnerability management. Tools: Greenbone, wazuh, tenable, rapid 7, qualys
• Minimum ten (10) years of working experience with programming or scripting languages such as PowerShell, Python and Bash.
• Minimum ten (10) years of working experience with virtualization/VDI technologies and cloud SaaS solutions.
• Minimum ten (10) years of experience in API integrations for automation.             

 

Education Required       

This classification requires possession of a bachelor’s degree in an IT-related or Engineering field.

Additional qualifying experience may be substituted for the required education on a year-for-year basis.