Job Information
BEAT LLC Endpoint Security Specialist in San Antonio, Texas
Job title: Endpoint Security Specialist
Location: San Antonio, TX-3133 General Hudnell Dr Acc Rd, San Antonio, TX 78226 (Hybrid role)
Clearance: Active Top Secret-SCI clearance
Certs: CompTIA Security
Job Description:
BEAT LLC, is looking for an experienced Endpoint Security Specialist to join our team. The Endpoint Security Specialist will help design, deploy, configure, optimize, and validate next-generation endpoint security solutions for customers. You’ll work with in-house teams to identify the right mix of tools, techniques, and procedures to translate our customer’s needs and future goals into a plan that will enable secure and effective solutions. In determining the best solutions, you will investigate new techniques, break free from the legacy model, and help customers exceed industry standards. As a team, we’ll take a critical approach to solution design, identifying gaps, providing alternatives, and customizing solutions to maintain a balance of security and business needs.
Qualifications:
3+ years Endpoint, Detection and Response (EDR) administration (CrowdStrike Falcon, VMware Carbon Black, Palo Alto Network Cortex XDR, Microsoft Windows Defender, Cylance, Tanium etc.)
3+ years of working with EDR tools performing requirements gathering, deployment, configuration, and conducting threat hunting
3+ years working with operational information security disciplines (e.g. incident response, security infrastructure management, or monitoring services)
Have knowledge and experience with Security Information and Event Management (SIEM) and Security Orchestration Automation and Response (SOAR) technologies
Have knowledge and experience with cyber security host and network tools (ie. Suricata, Elastic, Zeek, Nessus, SIFT)
2+ years security tool engineering and administration (e.g. NGAV, EPP, EDR, SIEM, SOAR, UEBA, Deception, Attack Surface Management, etc.)
Some of the following EDR experience:
Agent deployment, health check and coverage sustainability
Systems integration
Comparing vendor functionality
Mapping EDR capabilities to threat scenarios
Deploying EDR in a multi-agent (i.e. AV, NG AV) environments
Deep understanding and proven experience in Cybersecurity Operations (Monitoring, Detection, Incident Response, Forensics)
Project and delivery management experience
Have a solid understanding of Linux and Windows systems, hosts, networks, security, applications, and proficiency in shell scripting (Shell/Bash, JavaScript, Python).
Excellent oral, written communication skills and ability to lift over 50lbs on a regular basis.
Ability to be onsite daily in the San Antonio Tech Port area.
Desired Skills:
Experience with cloud technologies (AWS, Kubernetes) is highly desired.
Experience with EDR technologies
BA/BS Degree in Computer Science, Cybersecurity, Information Systems, or similar is highly desired.
Certifications to meet the DOD 8570 IAT certifications (i.e. Security+ or higher level).
Possess an understanding of US military defensive cyber operations (DCO) tools and concepts.
Prior experience or familiarity with our Big Data Platform is a plus.
Data parsing/transforming techniques to include JSON, XML, CSV formats.
Knowledge in automated configuration formats including Yaml.
Understanding of AGILE software development methodologies and use of standard software development tool suites. (e.g., JIRA, Confluence, Github Enterprise, etc.)
