Trellix/MDE Systems Engineer 3 at Lentech Inc.
Fort Meade, MD
$203,305–$217,122from the description
Jul 13, 2026
Fort Meade, MD
Jul 21, 2026
What this job asks for AI summary
A senior-level endpoint security engineering role supporting a classified government program, focused on architecting, deploying, and optimizing Microsoft Defender for Endpoint and Trellix HX across hybrid on-premises, cloud, and VDI environments. Day-to-day work spans writing engineering plans, tuning agent policies, building custom IOCs using KQL and YARA rules, advising government stakeholders, supporting SOC incident response, and mentoring junior engineers. Suited to a deeply experienced systems engineer holding an active TS/SCI with full-scope polygraph.
Principal level · 20+ years · Baltimore-Columbia-Towson, MD · TS/SCI clearance · Full-time
Advertised as Senior, but the requirements read as Principal.
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $141,208 (middle half $106,798–$194,505). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (9)
The posting is titled 'Senior Systems Engineer (Level 3)' but demands 20 years of experience and describes org-wide principal technical leadership at a national-security program — requirements that support a Principal-level classification despite the Senior title.
The role is located at the National Security Agency, which is headquartered in Fort Meade, MD (Baltimore-Columbia-Towson CBSA). No explicit city is stated in the posting, but NSA context strongly implies this location.
A TS/SCI with Full Scope Polygraph (FSP) is explicitly required — the most demanding clearance tier.
DoD 8570/8140 IAM Level II or III baseline certifications are required but name no specific product or tool, so they are not emitted as a named skill.
A Bachelor's degree is listed as required, but the JD explicitly states that 5 additional years of SE experience may be substituted — so the degree requirement is set to None per the substitution rule.
The SOC classification is Medium confidence: the role blends deep systems/endpoint engineering (15-1299) with information security analysis and EDR operations (15-1212); 15-1212 was chosen as the primary given the dominant focus on endpoint detection, threat hunting, and SOC support.
MECM (Microsoft Endpoint Configuration Manager, formerly SCCM) and Intune are listed as alternative deployment mechanisms for MDE; they are captured as alternatives on a single skill rather than separate entries.
Ignored 1 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): Microsoft Defender for Endpoint.
Requires a TS/SCI clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.