Cybersecurity Tools Administrator

Springfield, VA, US • Posted 2 hours ago • Updated 2 hours ago
Full Time
On-site
USD $80,001.00 - 120,000.00 per year
Company Branding Image
Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

  • Management
  • McAfee ePO
  • Malware Analysis
  • SIEM
  • Splunk
  • Vulnerability Management
  • Stacks Blockchain
  • Dashboard
  • KPI
  • Standard Operating Procedure
  • Forensics
  • Root Cause Analysis
  • Network
  • Security Controls
  • Documentation
  • Release Notes
  • Regulatory Compliance
  • Authorization
  • Certified Ethical Hacker
  • Cloud Computing
  • CompTIA
  • Penetration Testing
  • Security+
  • Continuous Monitoring
  • GRID
  • GSEC
  • System Security
  • SSCP
  • Computer Science
  • Endpoint Protection
  • Employee Self-service
  • IOC
  • Cyber Security
  • NIST 800-53
  • Risk Management Framework
  • RMF
  • ICD
  • Enterprise Networks
  • Incident Management
  • Log Analysis
  • Hardening
  • Security Clearance
  • Continuous Integration
  • Microsoft Windows
  • Linux
  • Servers
  • Database
  • Computer Networking
  • Information Technology
  • Systems Engineering
  • FOCUS

Summary

Job ID: 2616218

Location: Springfield, VA, US

Date Posted: 2026-08-27

Category: Cyber

Subcategory: Cyberspace Ops

Schedule: Full-Time

Shift: Day Job

Travel: Yes - 10% of the time

Minimum Clearance Required: TS.SCI

Clearance Level Must Be Able to Obtain: TS/SCI with Poly

Potential for Remote Work: ORA_ON_SITE

Description

SAIC is seeking a motivated Cybersecurity Tools Administrator to join our MAJESTIC Joint Program Office (JPO) Team in support of an on-premises enterprise IT environment. This role focuses on implementing, administering, and optimizing cybersecurity toolsets centered on Trellix Endpoint Security (ENS) and integrated capabilities such as Endpoint Detection & Response (EDR), Network Detection & Response (NDR), and malware protection. The administrator will manage policy, deployment, health/compliance, telemetry, and integrations with SIEM/SOAR to strengthen enterprise security posture.

All work is performed on-site in Springfield, VA.

Key Responsibilities:
  • Administer Trellix ePolicy Orchestrator (ePO): configure policies, tasks, and client assignments; perform agent deployment/updates; monitor health and compliance across Windows/Linux endpoints.
  • Implement and maintain cybersecurity toolsets including ESS/ENS, EDR, NDR, and malware protection; tune detections and containment to reduce false positives while improving fidelity.
  • Integrate endpoint tools with enterprise SIEM/SOAR (e.g., Splunk) and vulnerability management stacks (e.g., NessACAS) to enable unified visibility, correlation, and automated response.
  • Develop and maintain dashboards, reports, and KPIs for endpoint coverage, policy compliance, threat activity, and vulnerability remediation progress.
  • Conduct enterprise-wide agent posture checks; remediate orphaned agents, stale policies, connectivity issues, and broken update channels.
  • Author and maintain standard operating procedures (SOPs), change records, and implementation plans; follow standardized test, certification, and deployment procedures.
  • Support incident response by providing endpoint forensics, containment actions (e.g., DAC), isolation, and IOC sweep capability; assist with root-cause analysis and corrective actions.
  • Coordinate with Systems Administrators, Network Engineers, and Cybersecurity personnel to assess risks, validate configurations, and enforce security controls in accordance with RMF/NIST 800-53.
  • Ensure tool and control configuration compliance; review change requests; validate effectiveness of security controls across virtualized Windows/Linux servers and enterprise networks.
  • Maintain detailed documentation including release notes, configuration baselines, incident investigations, and compliance/authorization artifacts.


Qualifications

Education:
  • Bachelors degree in related field and 2-9+ years of experience OR;
  • Masters degree in related field and 0-7+ years of experience OR;
  • High School diploma or equivalent and 6-13+ years of experience.

Certifications (CWF Requirements):
  • Candidates must satisfy Cybersecurity Workforce Framework (CWF) ID 521 (Cyber Defense Infrastructure Support Specialist, Intermediate Level) requirements, as outlined by Navy COOL.
    This requirement can be met by possessing one or more of the following qualifying certifications:
  • Certified Ethical Hacker (CEH).
  • CompTIA Cloud+.
  • CompTIA Cybersecurity Analyst (CySA+).
  • CompTIA PenTest+.
  • CompTIA Security+.
  • GIAC Continuous Monitoring Certification (GMON).
  • GIAC Response and Industrial Defense (GRID).
  • GIAC Security Essentials Certification (GSEC).
  • Systems Security Certified Practitioner (SSCP).

OR This requirement can be met through:
  • A Bachelor's Degree in Cybersecurity, Computer Science, IT, or a related field.

Experience:
  • 2-5 years of experience administering enterprise cybersecurity tools (e.g., Trellix ePO/ENS, EDR/NDR) and performing endpoint/security operations in an enterprise IT environment.

Technical Skills:
  • Proficiency administering Trellix ePO and ENS/ESS; familiarity with Dynamic Application Containment (DAC), IOC sweep, and endpoint isolation.
  • Understanding of cybersecurity frameworks and processes (NIST 800-53, RMF, ICD 503).
  • Solid knowledge of Windows/Linux security configurations, AD-integrated deployments, and enterprise network concepts.
  • Familiarity with incident response procedures, log analysis, and database/server hardening.

Clearance Requirement:
  • Active TS/SCI clearance with the ability to obtain and maintain a TS/SCI with CI Poly.

Work Environment and Notes:
  • On-site Work: All work must be conducted on-site in Springfield, VA.
  • Program Scope: Supports on-premises enterprise IT environments, including virtualized Windows/Linux servers, databases, and comprehensive networking layers.
  • Subcontractor Role: Roles and responsibilities are defined per the subcontract agreement, with salary based on competitive market rates and role-specific requirements.


Target salary range: $80,001 - $120,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.


Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: 10111346
  • Position Id: 2616218
  • Posted 2 hours ago

Company Info

About SAIC

SAIC® is a premier mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, intelligence, and civilian markets includes secure high-end solutions in mission IT, enterprise IT, engineering services, and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives.

We are approximately 23,000 strong; driven by mission, united by purpose, and inspired by opportunities. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.3 billion.​​​ For more information, visit saic.com. For ongoing news, please visit our newsroom.

About_Company_One
Create job alert
Set job alertNever miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Springfield, Virginia

Today

Full-time

USD 120,001.00 - 160,000.00 per year

Springfield, Virginia

Today

Full-time

USD 80,001.00 - 120,000.00 per year

Arlington, Virginia

Today

Full-time

USD 120,001.00 - 160,000.00 per year

Springfield, Virginia

Today

Full-time

USD 80,001.00 - 120,000.00 per year

Search all similar jobs