Peraton requires Senior Endpoint Protections/ACAS Administrators to support the Special Operation Command Information Technology Enterprise Contract (SITEC) – 3. This position is located at Stuttgart, Germany and requires TESA approval. The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps); maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365. Under the direction of the Task Lead, the Senior Endpoint Protection/ACAS Administrators must have solid technical skills and experience to perform daily administration and troubleshooting of Host Based Security System on endpoints and scanning and identification and remediation of vulnerabilities using ACAS in accordance with Government compliance and cybersecurity guidelines. Endpoint protection /ACAS Administrators troubleshoot and resolve problems on endpoints and servers as well as conduct compliance scans with ACAS to identify security issues and patch compliance. Duties include but are not limited to:Some positions may require shift work and/or an ability to work a non-standard work schedule to support the USSOCOM missionDeveloping bi-directional chain of command and lateral cross-team/peer relationships across organizations supporting problem resolution and technology awarenessCommunicating and interacting effectively at all levels of staff and managementExercising independent judgment and managing stakeholder expectationsDemonstrating subject matter expertise with Endpoint Security Management, Data Loss Prevention (DLP), and Vulnerability ManagementProviding technical support for software, hardware, and DoD-specific applications related to the Tenable ACAS solutionAnalyzing and Assessing Security Technical Implementation Guides (STIGs), Information Assurance Vulnerability Alerts (IAVAs), and Security Content Automation Protocol (SCAP) releasesConducting vulnerability analysis and collaborating with Cross Functional Administrators to mitigate vulnerabilities and provide guidance on remediationEnsuring scheduled scans cover all intended assets and run successfullyTroubleshooting credential failures by analyzing target device configurationsDemonstrating subject matter expertise in operating and optimizing security tools, including SIEM platforms such as Microsoft Sentinel, Splunk, Trellix EDR, Microsoft Defender and Tenable ACAS solutionsConfiguring, operating, and maintaining Trellix EDR product suite (ePolicy Orchestrator, Trellix Agent, Data Loss Prevention, Policy Auditor, ESS/ENS) on Windows, Linux and UNIX operating systemsEnsuring compliance with DISA, US Cyber Command, and SOCOM operations orders (OPORDs), Fragmentary orders (FRAGOs), Change Tasking Orders (CTOs), and other DoD configuration compliance requirements Analyzing and reporting on security trends, vulnerabilities, incidents, and providing actionable recommendations to enhance detection capabilities and mitigate security risks Reviewing, assessing and recommending security controls associated with SIE environmentsPerforming cyber incident analysis to understand the technical details, root causes, and potential impact of incidents Performing periodic reviews of environment and providing ad-hoc and periodic usage reporting to customer and leadership Maintaining and Developing detailed documentation of Tenable ACAS and Trellix configurations, policies, and changesGenerating reports on security posture, compliance, and security incidents for stakeholders Ensuring infrastructure Service Level Agreement (SLA) and policy complianceDesired experience and proficiency:Experience in the following Enclaves: NIPR, SIPR, SOCRATES, BICES, Tactical Mission Networks and Commercial ISPUnderstanding of Cyber Exposure to include the lifecycle states, as well as network and endpoint asset classesExperience in analytics and historical data collection toolsExtensive knowledge and experience performing vulnerability analysis, configuration audits, and security monitoring within tactical and strategic environments Proficiency with vulnerability scanning tools and understanding of Vulnerability Management System (VMS) and Continuous Monitoring and Risk Scoring (CMRS)Experience with security architectures and administration of Windows, Linux, and UNIX operating systemsExperience with LAN/WAN network design, isolated networks and systems, patch deployment and system configurationExperience with DoD STIGs, IA Tools (SCCVI, SCRI, SCAP, Host Based Security System), and Risk Management FrameworkExperience with Service Now or Remedy Desired skills:Trellix EDR Product Suite (ePO, Endpoint Security, Data Loss Prevention, Application Control, Policy Auditor, ESS/ENS)Microsoft Defender Endpoint Microsoft Sentinel SplunkTenable Products (Security Center, Nessus Network Monitor, Nessus Agents, Log Correlation Engine)Windows OS and ServerLinux Unix Hyper Convergence Infrastructure (HCI) VMwareAzure Cloud Service NowRemedyMicrosoft Visio Required Qualifications: Minimum of 10 years with AS/AA; 8 years with BS/BA; 6 years with MS/MA; 3 years with PhD or 12 years of relevant experience with H.S to meet TESA requirements. DoD TS/SCI clearance is required for this role DoD 8570.01-M IAT II certification?AND DISA HBSS Admin 201 OR DISA HBSS Admin 301 TENABLE Security Center Introduction certification (able to obtain within 60 days) ? ? ? ? ? SITEC2025 Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.$80,000 - $128,000. This represents the typical salary range for this position based on experience and other factors.EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.