Junior Endpoint Protection Analyst - Washington… at MSCCN · Location…

ATTENTION MILITARY AFFILIATED JOB SEEKERS - Our organization works with partner companies to source qualified talent for their open roles. The following position is available to Veterans, Transitioning Military, National Guard and Reserve Members, Military Spouses, Wounded Warriors, and their Caregivers. If you have the required skill set, education requirements, and experience, please click the submit button and follow the next steps. All positions are onsite, unless otherwise stated.

VIATEQ Corporation is looking for a Junior Endpoint Protection Analyst to support enterprise cybersecurity operations and IT administrative support services for a federal government client. This position requires the ability to obtain and maintain a government background investigation, PIV credentials, and all requisite IT access authorizations prior to performing work. Primary work will be performed at the client site in Washington, DC and approved remote/telework locations.

This role serves as an important technical support function responsible for assisting in the administration, monitoring, and maintenance of enterprise endpoint security controls and endpoint protection platforms across a complex, geographically distributed federal IT environment spanning on-premises infrastructure, cloud platforms, and enterprise applications.

The ideal candidate is an enthusiastic and detail-oriented early-career cybersecurity professional with foundational knowledge of endpoint security technologies, security operations practices, and Federal cybersecurity compliance requirements. This individual must possess a strong desire to learn and grow within a dynamic federal IT security environment, a collaborative mindset, and the technical foundation necessary to support the administration and monitoring of enterprise endpoint protection capabilities under the guidance of senior security personnel.

The Junior Endpoint Protection Analyst will serve as a supporting technical contributor within the program's cybersecurity team, assisting senior security engineers and analysts in the day-to-day administration, monitoring, and maintenance of enterprise endpoint security controls and endpoint protection platforms. This individual supports the protection of Government endpoints—including workstations, laptops, servers, and mobile devices—against malware, unauthorized access, policy violations, and other security threats, contributing to the program's broader mission of maintaining a strong and continuously improving enterprise security posture in alignment with Federal cybersecurity frameworks and client security requirements.

Responsibilities:
Endpoint Protection Platform Administration:

• Assist in the administration and maintenance of enterprise endpoint protection platforms, including Endpoint Detection and Response (EDR), antivirus, anti-malware, host-based intrusion detection, application control, and device management solutions under the guidance of senior security engineers.
• Support the configuration, deployment, and management of endpoint security agents across managed endpoints, ensuring agent coverage is comprehensive, current, and accurately tracked.
• Monitor endpoint protection platform dashboards and consoles, identifying endpoints with outdated agents, missing security policies, protection gaps, or active threats requiring investigation or remediation.
• Assist in the development and maintenance of endpoint security policies, configurations, and deployment packages, ensuring policies are aligned with applicable security baselines, DISA STIGs, CIS Benchmarks, and client security requirements.
• Support the management of endpoint protection platform exceptions, exclusions, and whitelists, ensuring all exceptions are properly documented, reviewed, and approved in accordance with defined governance procedures.
• Assist in the administration and maintenance of Mobile Device Management (MDM) and Unified Endpoint Management (UEM) platforms, supporting the enrollment, configuration, monitoring, and compliance enforcement of managed mobile and remote devices.
• Generate and distribute endpoint protection platform health and coverage reports, providing program leadership and Government stakeholders with accurate visibility into endpoint security posture and protection gaps.

Threat Detection & Alert Monitoring:

• Monitor endpoint protection platform alerts, EDR telemetry, and security event feeds, triaging security alerts and escalating confirmed or suspected security incidents to senior analysts and the incident response team in accordance with defined escalation procedures and SLA requirements.
• Assist in the investigation of endpoint security alerts, gathering relevant event data, endpoint telemetry, and contextual information to support accurate triage and escalation decisions under the guidance of senior security personnel.
• Support the development and maintenance of endpoint alert triage procedures, escalation playbooks, and response runbooks, contributing practical observations and lessons learned from daily monitoring activities.
• Assist in identifying and documenting false positive alert patterns, supporting senior engineers in refining detection rules, alert thresholds, and EDR platform tuning to improve alert fidelity and reduce analyst fatigue.
• Monitor endpoint protection platform health and availability, identifying and escalating platform performance issues, service disruptions, and coverage gaps that may impact the program's ability to detect and respond to endpoint threats.

Vulnerability & Patch Management Support:

• Assist in the execution of endpoint vulnerability scanning activities, supporting the scheduling, execution, and result collection of regular vulnerability scans across managed endpoints using enterprise vulnerability scanning platforms.
• Support the analysis and triage of endpoint vulnerability scan results, assisting senior engineers in identifying, categorizing, and prioritizing vulnerabilities based on severity, exploitability, and asset criticality under defined risk-based prioritization criteria.
• Assist in tracking and reporting on endpoint patch compliance status, monitoring patch deployment progress across managed endpoints and identifying systems with outstanding critical and high-severity patches requiring escalation.
• Support coordination with system administrators and desktop support personnel to facilitate timely endpoint patch deployment, providing technical assistance and escalation support as needed.
• Maintain accurate and current endpoint vulnerability and patch compliance records in the program's vulnerability management tracking system, supporting audit readiness and compliance reporting activities.

Endpoint Hardening & Compliance:

• Assist in the implementation and validation of endpoint hardening standards, supporting the application of DISA STIGs, CIS Benchmarks, and client-specific security baselines across managed Windows, Linux, and macOS endpoint environments.
• Support configuration compliance scanning activities, assisting in the execution and analysis of Security Content Automation Protocol (SCAP) scans and configuration compliance assessments across managed endpoints.
• Assist in tracking and reporting on endpoint configuration compliance status, identifying non-compliant endpoints and supporting remediation activities to bring endpoints into compliance with applicable security baselines.
• Support the development and maintenance of endpoint hardening documentation, including hardening guides, configuration baseline specifications, and compliance reporting templates.

Incident Response Support:

• Support cybersecurity incident response activities involving endpoint security events, assisting senior analysts and engineers in evidence collection, endpoint isolation, malware containment, and remediation activities under defined incident response procedures.
• Assist in the collection and preservation of endpoint forensic evidence, supporting chain of custody procedures and forensic acquisition activities under the guidance of senior digital forensics or incident response personnel.
• Document incident response activities accurately and completely in the program's ITSM platform, ensuring incident records contain sufficient detail to support post-incident review, root cause analysis, and lessons learned activities.
• Support post-incident review activities, contributing endpoint security observations and technical findings to root cause analysis discussions and corrective action development.

Compliance & Documentation Support:

• Assist in maintaining endpoint security compliance documentation, including security control implementation evidence, configuration compliance records, vulnerability remediation tracking data, and audit artifacts, supporting the program's ATO and continuous monitoring obligations.
• Support the development and maintenance of endpoint security standard operating procedures, operational runbooks, and knowledge base articles, contributing practical operational knowledge to the program's documentation library.
• Assist in the preparation of endpoint security status reports, compliance dashboards, and metrics summaries for program leadership and Government stakeholders.
• Ensure all endpoint security activities are conducted in compliance with applicable Federal regulations, client security policies, and program security requirements, including FISMA, NIST SP 800-53, applicable DISA STIGs, and client-specific cybersecurity policies.
• Ensure all activities involving personally identifiable information (PII), CUI, or other sensitive data categories are handled in accordance with applicable privacy protection requirements and data handling restrictions.

Professional Development & Learning:

• Actively pursue professional development and skills growth in endpoint security, cybersecurity operations, and Federal IT compliance, leveraging available training resources, mentorship from senior team members, and industry certifications to continuously expand technical capabilities.
• Participate in team knowledge sharing sessions, security briefings, and technical training activities, contributing to a collaborative learning environment within the cybersecurity team.
• Stay current with emerging endpoint security threats, vulnerabilities, attacker TTPs, and evolving Federal cybersecurity requirements, incorporating new knowledge into daily monitoring and analysis activities.