Trellix Endpoint Security Solutions (ESS) SME

Job Description

Job Description

Trellix Endpoint Security Solutions (ESS) SME
Falls Church, Virginia.
Full-time.

Important Notice: This position is contingent upon contract award.

Summary:
ESS Subject Matter Experts manage endpoint security platforms including antivirus, Endpoint Detection and Response (EDR), Host-Based Security Systems (HBSS), and endpoint compliance monitoring. This role configures security policies, investigates endpoint security alerts, deploys security updates, and ensures endpoint compliance with DoD security requirements across thousands of workstations and servers.

Key Responsibilities:

• Manage endpoint security for 1,000-3,000 endpoints (workstations, servers, mobile devices).
• Deploy and configure HBSS (McAfee/Trellix) per DoDI 8500.01 requirements.
• Implement Endpoint Detection and Response (EDR) platforms.
• Analyze 200-800 endpoint security alerts daily.
• Investigate 50-150 malware detections monthly.
• Develop and deploy hundreds of endpoint security policies.
• Monitor endpoint compliance with security baselines daily.
• Coordinate deployment of 100-300 security patches monthly.

Performance Metrics:

• Endpoints Managed: 1,000-3,000 per SME.
• Daily Alerts: 200-800 analyzed.
• Malware Detections: 50-150 investigated monthly.
• Policy Deployments: 20-40 updates monthly.
• Compliance Monitoring: Daily checks on all endpoints.
• Security Updates: 100-300 patches coordinated monthly.
• Monthly Reports: 10-20 endpoint security status reports.

Requirements:

• Clearance: Secret (NIPR), Top Secret (SIPR), or TS/SCI Eligible (JWICS) based on network assignment.
• Education: Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, or related field.
• Experience: 10+ years endpoint security and systems management experience.
• Certifications: CISSP or Security+ required; endpoint security certifications (CrowdStrike, Trellix, McAfee, etc.) desired.
• Technical Knowledge: Expert knowledge of HBSS, EDR platforms, malware analysis, Windows and Linux endpoint security, DoD endpoint security requirements.

About Advana:
Advana is the Department of Defense Chief Digital and Artificial Intelligence Office's (CDAO) enterprise-wide data, analytics, and AI platform. Advana provides DoD military and civilian decision makers with unprecedented access to enterprise data, tools, and capabilities in a secure environment. The platform hosts hundreds of curated applications across logistics, financial management, personnel, health, and other domains, accelerating decision advantage through accessible, actionable data and AI capabilities.

This position supports comprehensive cybersecurity operations for the Advana platform across three classified networks (NIPR, SIPR, JWICS).

Important Notes:
Position Status:

• This position is contingent upon contract award.
• Start date will be determined upon contract award.
• We will maintain contact with selected candidates throughout the award process.

Work Requirements:

• U.S. Citizen required.
• Clearance varies by network: Secret (NIPR), Top Secret (SIPR), or TS/SCI Eligible (JWICS).
• On-premises work required at Suffolk Building, Falls Church, VA.
• No remote work options available.
• Standard business hours with operational flexibility.

Benefits:

• 4 Weeks Paid Time Off.
• All Federal Holiday’s Paid Vacation.
• Four Percent Matching 401K.
• Full health/vision/dental benefits for the employee and family paid 100% by ZTI Solutions, LLC.

We thank all applicants for their interest. Only candidates selected for interviews will be contacted.