Systems Engineer III

Job Responsibilities

• Lead the architecture, engineering, deployment, and lifecycle management of Microsoft Defender for Endpoint (MDE) and Trellix HX across enterprise environments.
• Design and implement endpoint security solutions supporting on-premises, cloud, and virtual desktop infrastructure (VDI) environments.
• Develop system engineering documentation, implementation plans, and deployment strategies for enterprise endpoint protection platforms.
• Configure and optimize endpoint agent policies, exclusions, and platform settings to improve operational performance.
• Monitor endpoint health, system performance, and enterprise security posture across large-scale environments.
• Collaborate with threat hunting and cyber intelligence teams to translate threat intelligence into custom Indicators of Compromise (IOCs), Kusto Query Language (KQL) queries, and YARA detection rules.
• Provide advanced technical support and forensic expertise during high-priority cybersecurity incidents.
• Serve as the primary technical advisor to Government stakeholders regarding endpoint security architecture, engineering risks, and implementation strategies.
• Mentor junior and mid-level engineers while promoting engineering best practices and technical excellence.

Minimum Requirements

• Active TS/SCI clearance with Polygraph required.
• Demonstrated engineering expertise with Microsoft Defender for Endpoint (MDE), including architecture, deployment through MECM/SCCM or Intune, policy ring management, and advanced threat hunting using Kusto Query Language (KQL).
• Demonstrated experience engineering, deploying, and administering Trellix HX (formerly FireEye) controllers and agents within air-gapped or highly restricted environments.
• Experience creating OpenIOC and YARA detection rules.
• In-depth knowledge of Windows, Linux, and macOS operating systems, including file systems, registry structures, and process execution.
• Compliance with DoD 8570/8140 IAM Level II or Level III certification requirements.

Desired Skills

• Microsoft Certified: Security Operations Analyst Associate (SC-200), Azure Security Engineer Associate (AZ-500), or Trellix engineering certifications.
• Experience with Model-Based Systems Engineering (MBSE) and Cameo.
• Experience using Jira and Confluence within the Atlassian Suite.
• Familiarity with NSA Technical Manual standards, including NSA DS-89.
• Understanding of defense-in-depth engineering principles.
• Strong collaboration, communication, and technical leadership skills.
• Experience mentoring engineering teams and developing technical talent.

Benefits

Award-Winning Culture: Quevera was recognized as a Top Workplace in the Washington, DC/Baltimore region for 2025, marking our fifth consecutive year receiving this distinction based on employee feedback.

Outstanding Benefits: We invest in our employees and their families through a highly competitive benefits package, including:

• 100% employer-paid medical coverage (optional plan)
• Competitive options for Medical, Dental and Vision insurance
• Employer-paid short-term and long-term disability coverage
• Employer-paid life insurance
• $5,000 annually for education, training, certifications, and professional development
• Career advancement through our structured iQTouch Program
• Up to 6% 401(k) match
• Additional 4% profit-sharing contribution, at company discretion

About Quevera

Quevera is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age or any other characteristic protected by law.