Cybersecurity Tools Administrator

Job ID: 2616218

Location

Springfield, VA, US

Date Posted

2026-08-27

Category

Cyber

Subcategory

Cyberspace Ops

Schedule

Full-Time

Shift

Day Job

Travel

Yes - 10% of the time

Minimum Clearance Required

TS.SCI

Clearance Level Must Be Able to Obtain

TS/SCI with Poly

Potential for Remote Work

ORA_ON_SITE

Description

SAIC is seeking a motivated Cybersecurity Tools Administrator to join our MAJESTIC Joint Program Office (JPO) Team in support of an on-premises enterprise IT environment. This role focuses on implementing, administering, and optimizing cybersecurity toolsets centered on Trellix Endpoint Security (ENS) and integrated capabilities such as Endpoint Detection & Response (EDR), Network Detection & Response (NDR), and malware protection. The administrator will manage policy, deployment, health/compliance, telemetry, and integrations with SIEM/SOAR to strengthen enterprise security posture.

All work is performed on-site in Springfield, VA.

Key Responsibilities

• Administer Trellix ePolicy Orchestrator (ePO): configure policies, tasks, and client assignments; perform agent deployment/updates; monitor health and compliance across Windows/Linux endpoints.
• Implement and maintain cybersecurity toolsets including ESS/ENS, EDR, NDR, and malware protection; tune detections and containment to reduce false positives while improving fidelity.
• Integrate endpoint tools with enterprise SIEM/SOAR (e.g., Splunk) and vulnerability management stacks (e.g., Nessus/ACAS) to enable unified visibility, correlation, and automated response.
• Develop and maintain dashboards, reports, and KPIs for endpoint coverage, policy compliance, threat activity, and vulnerability remediation progress.
• Conduct enterprise-wide agent posture checks; remediate orphaned agents, stale policies, connectivity issues, and broken update channels.
• Author and maintain standard operating pro