Endpoint Detection and Response (EDR) Cyber Engineer

Advance how our customers operate while you advance your career. Join GDIT as an Endpoint Detection and Response Engineer and build an impactful career in enterprise IT, collaborating with people who are driven and resourceful like you.

MEANINGFUL WORK AND PERSONAL IMPACT:

As an EDR  Engineer, the work you’ll do at GDIT will be impactful to a critical client mission. You will play a crucial role in supporting cybersecurity operations and enterprise endpoint protection.

The EDR Engineer is responsible for engineering, deploying, integrating, and sustaining endpoint security technologies across enterprise networks.  This role ensures comprehensive protection of workstations, servers, and mobile devices through the implementation and maintenance of endpoint security technologies such as endpoint detection and response (EDR), Mobile Device Management platforms, next-gen AV, SOAR, and Security Information and Event Management technologies. The engineer will support capability development, lifecycle management, and modernization efforts across both pre-production and production environments.

Duties and Responsibilities:
o    Deploy, configure, and maintain endpoint security solutions including EDR, MDM, AV, SIEM, IDS/IPS, and vulnerability management agents.
o    Monitor endpoint security platforms for performance, health, and security events; provide proactive recommendations for optimization.
o    Analyze endpoint alerts, identify suspicious activity and suspected security incidents; communicate with Incident Response teams and support triage, investigation, and remediation as necessary.
o    Integrate endpoint security solutions with enterprise systems, SIEM platforms, and cybersecurity workflows.
o    Support lab-based testing, validation, and integration of new endpoint security technologies prior to enterprise rollout.
o    Develop and maintain documentation for endpoint security configurations, SOPs, and troubleshooting procedures.
o    Collaborate with cybersecurity, network, and systems teams to implement enterprise-wide endpoint protection enhancements.
o    Assist in vulnerability management activities, including agent deployment, scanning, reporting, and remediation coordination.
o    Participate in security audits, compliance reviews, and accreditation activities related to endpoint security.
o    Provide technical guidance and mentorship to junior team members and other IT personnel.
o    Engage with vendors to resolve technical issues, evaluate new capabilities, and support lifecycle management.
o    Produce reports, dashboards, and data sets to support leadership decision making and continuous improvement efforts.
o    Participate in capacity planning for endpoint security tools and supporting infrastructure.
o    Contribute to cybersecurity modernization efforts by identifying innovative approaches to improve automation, orchestration, and operational efficiency.

WHAT YOU’LL NEED TO SUCCEED:
Bring your technology expertise and drive for innovation to GDIT. The Systems Engineer Principal must have:
o    Experience: 5+ years of related experience
o    Required Skills:

• Hands on experience with endpoint security solutions such as EDR,  device control, and vulnerability management agents.
• Strong understanding of endpoint protection strategies, cybersecurity best practices, and industry frameworks.
• Experience supporting large scale enterprise environments, including Windows and Linux endpoints.
• Ability to analyze endpoint security events, identify risks, and support incident response activities.
• Experience deploying and maintaining virtual appliances and servers supporting endpoint security tools.
• Strong documentation skills for configuration guides, SOPs, and troubleshooting procedures.
• Ability to collaborate effectively with cross functional IT and cybersecurity teams.

o    Desired Skills:

• Familiarity with enterprise EDR platforms, host based security tools, SOAR, and endpoint management systems.
• Experience with automation and orchestration tools (e.g., Ansible, PowerShell, Python).
• Ability to support end to end endpoint security engineering across pre production and production networks.

o    Security clearance level: TS clearance with SCI eligibility

GDIT IS YOUR PLACE
At GDIT, the mission is our purpose, and our people are at the center of everything we do.
● Growth: AI-powered career tool that identifies career steps and learning opportunities
● Support: An internal mobility team focused on helping you achieve your career goals
● Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
● Flexibility: Telework available
● Community: Award-winning culture of innovation and a military-friendly workplace

OWN YOUR OPPORTUNITY
Explore a career in cyber at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.