Junior Endpoint Protection Analyst

VIATEQ Corporation provides collaborative solutions and services to federal government agencies. The Junior Endpoint Protection Analyst supports the administration, monitoring, maintenance, and compliance of enterprise endpoint security platforms across distributed federal IT environments, including threat alert triage, vulnerability and patch management, endpoint hardening, incident response, documentation, and continuous learning.

What you'll do:

• Assist in the administration and maintenance of enterprise endpoint protection platforms, including Endpoint Detection and Response (EDR), antivirus, anti-malware, host-based intrusion detection, application control, and device management solutions under the guidance of senior security engineers
• Support the configuration, deployment, and management of endpoint security agents across managed endpoints, ensuring agent coverage is comprehensive, current, and accurately tracked
• Monitor endpoint protection platform dashboards and consoles, identifying endpoints with outdated agents, missing security policies, protection gaps, or active threats requiring investigation or remediation
• Assist in the development and maintenance of endpoint security policies, configurations, and deployment packages, ensuring policies are aligned with applicable security baselines, DISA STIGs, CIS Benchmarks, and client security requirements
• Support the management of endpoint protection platform exceptions, exclusions, and whitelists, ensuring all exceptions are properly documented, reviewed, and approved in accordance with defined governance procedures
• Assist in the administration and maintenance of Mobile Device Management (MDM) and Unified Endpoint Management (UEM) platforms, supporting the enrollment, configuration, monitoring, and compliance enforcement of managed mobile and remote devices
• Generate and distribute endpoint protection platform health and coverage reports, providing program leadership and Government stakeholders with accurate visibility into endpoint security posture and protection gaps
• Monitor endpoint protection platform alerts, EDR telemetry, and security event feeds, triaging security alerts and escalating confirmed or suspected security incidents to senior analysts and the incident response team in accordance with defined escalation procedures and SLA requirements
• Assist in the investigation of endpoint security alerts, gathering relevant event data, endpoint telemetry, and contextual information to support accurate triage and escalation decisions under the guidance of senior security personnel
• Support the development and maintenance of endpoint alert triage procedures, escalation playbooks, and response runbooks, contributing practical observations and lessons learned from daily monitoring activities
• Assist in identifying and documenting false positive alert patterns, supporting senior engineers in refining detection rules, alert thresholds, and EDR platform tuning to improve alert fidelity and reduce analyst fatigue
• Monitor endpoint protection platform health and availability, identifying and escalating platform performance issues, service disruptions, and coverage gaps that may impact the program's ability to detect and respond to endpoint threats

What they're looking for:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field from an accredited college or university. Equivalent combination of education and directly relevant experience or military service in a cybersecurity-related role may be considered
• Minimum of 1–2 years of experience in a cybersecurity, IT operations, or endpoint security support role, including internship, academic project, or entry-level professional experience in a relevant discipline
• Foundational knowledge of endpoint security concepts, including antivirus and anti-malware technologies, EDR platforms, endpoint hardening, patch management, and mobile device management
• Foundational knowledge of Windows operating system administration and security, including Active Directory, Group Policy, Windows Security Center, and Windows Event Logs
• Ability to obtain and maintain a government background investigation, PIV credentials, and all requisite IT access authorizations prior to performing work
• Foundational technical knowledge of endpoint security technologies and concepts, including EDR platforms, antivirus and anti-malware solutions, host-based intrusion detection, application control, patch management, and mobile device management
• Basic understanding of cybersecurity principles, including the CIA triad, defense-in-depth, least-privilege access control, and common attack vectors targeting enterprise endpoints
• Familiarity with Windows operating system security, including Active Directory, Group Policy Objects, Windows Event Logs, Windows Defender, and common Windows-based security monitoring tools
• Basic understanding of Federal cybersecurity frameworks and compliance requirements, including NIST SP 800-53, FISMA, DISA STIGs, CIS Benchmarks, and applicable Federal endpoint security policies
• Strong analytical and attention-to-detail skills with the demonstrated ability to review security alerts, event logs, and platform dashboards systematically and accurately under the guidance of senior security personnel
• Strong written and verbal communication skills with the ability to document security events, alert triage findings, and operational activities clearly and accurately in ITSM tickets, incident records, and status reports
• Demonstrated ability to work effectively as a member of a cross-functional technical team, following established procedures, escalating issues appropriately, and actively seeking guidance from senior personnel

Benefits:

• Approved remote/telework locations
• Medical insurance
• Dental insurance
• Vision insurance
• 401(k) plan
• Paid time off
• 12 paid federal holidays
• Flexible spending accounts
• Professional development reimbursement