Senior Security Engineering

On-site in Washington, DC

Security Engineer (Trellix), you will serve as the technical lead for our client's endpoint security and data protection ecosystem. You will balance day-to-day operational support with strategic cybersecurity engineering initiatives while partnering with security operations, infrastructure, application teams, and leadership to strengthen the overall security posture.

Due to federal security clearance requirements, applicant must be a United States Citizen with an active Top Secret clearance. This is a full-time, permanent opportunity, offering a competitive salary and comprehensive benefits package. Serve as technical lead for Trellix endpoint security and data protection capabilities across the enterprise.

Administer and engineer Trellix ePO, ENS, EDR, DLP, Drive Encryption (FRP/FRMP), TIE, DXL, Policy Auditor, Rogue System Detection, TSME, Application and Change Control (Solidcore), and FIM.

Implement and manage application whitelisting, endpoint hardening, encryption, and data protection technologies.

Integrate endpoint security platforms with SIEM, SOAR, threat intelligence, and identity management solutions.

Develop and maintain DLP policies, device control mechanisms, and data exfiltration prevention controls.

Support SOC operations and enhance 24x7 threat monitoring and response capabilities.

Support compliance initiatives aligned with federal cybersecurity frameworks and regulations.

Design dashboards, metrics, and operational reporting for cybersecurity stakeholders.

Active TS/SCI security clearance.

• Hands-on experience with Trellix ePO, ENS, EDR, DLP, Drive Encryption (FRP/FRMP), TIE, DXL, Policy Auditor, Rogue System Detection, TSME, Application and Change Control (Solidcore), and FIM.
• Experience implementing application whitelisting, endpoint hardening, encryption, and data protection technologies and integrating with SIEM, SOAR, threat intelligence, and identity platforms.
• Strong understanding of endpoint security architecture, cyber threat detection, incident response, and risk management principles.
• Experience developing and maintaining DLP policies, device control, and data exfiltration prevention controls.
• Experience supporting SOCs and improving 24x7 monitoring and response.
• Insider Risk, Data Protection, or UAM program support; automation with PowerShell, Python, REST APIs; relevant Trellix, cybersecurity, or cloud certifications.