Job description

Leidos has an exciting opportunity a Principal Endpoint Security Systems Engineer in our Intel Security Sector s Analysis Solutions Business Area . Our talented team is at the forefront in Security Engineering, Computer Network Operations (CNO), Mission Software, Analytical Methods and Modeling, Signals Intelligence (SIGINT), and Cryptographic Key Management. At Leidos , we offer competitive benefits , including Paid Time Off, 11 paid Holidays, 401K with a 6% company match and immediate vesting, Flexible Schedules, Discounted Stock Purchase Plans, Technical Upskilling, Education and Training Support, Parental Paid Leave, and much more. Join us and make a difference in National Security! Job Summary This effort is seeking an experienced endpoint security systems engineer to join our Cyber Security Engineering team. The focus of this team member will be to design, deploy, maintain, and upgrade endpoint security capabilities, with opportunities for cross training on our other security tools. Working in a hybrid cloud/on-prem mission environment the engineer will support integration of Linux and Windows hosted mission systems with the endpoint security product and maintaining the scan policies to ensure proper protection of mission systems from external threats. Primary Responsibilities Maintaining and upgrading the central management consoles (currently Trellix - ePolicy Orchestrator) on multiple isolated networks Managing the integration of mission application servers (Linux and Windows) with the management console Deploying malware protection software (currently Trellix Endpoint Threat Protection) updates and improved scan exclusion policies to mission application servers Responding promptly to mission teams to successfully troubleshoot issues with integration (including cases where excessive real time malware scans are believed to be impeding mission performance) Determine methods to automate and improve the performance of the endpoint security suite within a hybrid cloud/on-prem environment Integrate endpoint security scan processes for integrated reporting via external tools (such as Splunk or AppDynamics) Investigate findings of malware detected on mission application servers Basic Qualifications Experience with tools such as Trellix ePolicy Orchestrator and Trellix Endpoint Threat Protection Experience with maintaining systems on Linux and Windows platforms Ability to partner with mission application teams to jointly troubleshoot issues with endpoint security integration Experience with incident detection, incident response and forensics activities Strong attention to detail with analytical mind and outstanding problem-solving skills Bachelor’s degree with at least 12 or more years relevant experience. Additional years of experience may be substituted in lieu of a degree. To be considered must have an active TS/SCI with polygraph security clearance Preferred Qualifications Experience with Cisco Secure Endpoint (formerly AMP for Endpoints) or other endpoint security tools Experience with Cloud Computing Technologies/Amazon Web Services (AWS) Experience integrating endpoint security tool findings with external products such as Splunk or AppDynamics Experience with managing endpoint security across on-prem and cloud environment boundaries Experience with additional cyber security tools and processes such as Splunk, Rapid7, SolarWinds, Cisco IDS/IPS, VPN, WebInspect, AppDetective At Leidos , the opportunities are boundless. We challenge our staff with interesting assignments that allow them to thrive professionally and personally. For us, helping you grow your career is good business. We look forward to learning more about you – apply today. #CABARESTON #ASBA #HALO If you re looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We re not hiring followers. We re recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We re already at step 30 — and moving faster than anyone else dares. Original Posting: January 21, 2026 For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. Pay Range: Pay Range $131,300.00 - $237,350.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Requirements

Must-haves

Maintaining and upgrading the central management consoles (currently Trellix - ePolicy Orchestrator) on multiple isolated networks
Managing the integration of mission application servers (Linux and Windows) with the management console
Deploying malware protection software (currently Trellix Endpoint Threat Protection) updates and improved scan exclusion policies to mission application servers
Responding promptly to mission teams to successfully troubleshoot issues with integration (including cases where excessive real time malware scans are believed to be impeding mission performance)
Determine methods to automate and improve the performance of the endpoint security suite within a hybrid cloud/on-prem environment
Integrate endpoint security scan processes for integrated reporting via external tools (such as Splunk or AppDynamics)
Investigate findings of malware detected on mission application servers
Experience with tools such as Trellix ePolicy Orchestrator and Trellix Endpoint Threat Protection
Experience with maintaining systems on Linux and Windows platforms
Ability to partner with mission application teams to jointly troubleshoot issues with endpoint security integration
Experience with incident detection, incident response and forensics activities
Strong attention to detail with analytical mind and outstanding problem-solving skills
Bachelor’s degree with at least 12 or more years relevant experience. Additional years of experience may be substituted in lieu of a degree.
To be considered must have an active TS/SCI with polygraph security clearance
Original Posting: January 21, 2026

Nice-to-haves

Experience with Cisco Secure Endpoint (formerly AMP for Endpoints) or other endpoint security tools
Experience with Cloud Computing Technologies/Amazon Web Services (AWS)
Experience integrating endpoint security tool findings with external products such as Splunk or AppDynamics
Experience with managing endpoint security across on-prem and cloud environment boundaries
Experience with additional cyber security tools and processes such as Splunk, Rapid7, SolarWinds, Cisco IDS/IPS, VPN, WebInspect, AppDetective

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aws

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

401k

Pto

Paid Time Off