Endpoint DLP Engineer: Lead Enterprise Data Protection

Phase2 Technology; Riverdale Park (MD); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen is seeking a Trellix Endpoint DLP Engineer to design, deploy, and operationalize enterprise endpoint data protection controls. You will own Trellix EDR/DLP components, ensuring data is identified, monitored, and protected across the enterprise.

You will lead deployment, policy automation, and integration with SIEM, SOAR, CASB, CMDB, and identity security tools to provide end-to-end visibility. Strong analytical, engineering, and stakeholder engagement are essential.

Qualifications

• 4+ years of experience in cybersecurity engineering, data protection, or endpoint security.
• 2+ years of experience with Trellix Endpoint DLP, Trellix ePO, and endpoint management.
• Experience with highly regulated industries (healthcare, finance, federal, defense, energy).
• Experience with SIEM/SOAR and Trellix/McAfee security stack (ENS, DLP Monitor/Discover, ePO).
• Scripting skills for automation and taxonomy development.

Responsibilities

• Design, deployment, and management of Trellix Endpoint DLP and related components.
• Integrate DLP with SIEM, SOAR, CASB, CMDB, and identity tools for end-to-end visibility.
• Develop playbooks, runbooks, and SOPs for policy lifecycle management.
• Analyze DLP telemetry and incidents to identify risks and false positives.
• Collaborate with Legal, Compliance, Data Governance, and HR on rules and thresholds.

Skills

Cybersecurity engineering

Trellix Endpoint DLP

SIEM/SOAR integration

Scripting (PowerShell/Python/Bash)

Data classification guidance

Education

High School Diploma or GED

Associate's degree

Bachelor's degree

Master's degree

Tools

Trellix ePO

Windows endpoint management

Linux endpoint management

Job description

Booz Allen is seeking a Trellix Endpoint DLP Engineer to design, deploy, and operationalize enterprise endpoint data protection controls. You will own Trellix EDR/DLP components, ensuring data is identified, monitored, and protected across the enterprise.

You will lead deployment, policy automation, and integration with SIEM, SOAR, CASB, CMDB, and identity security tools to provide end-to-end visibility. Strong analytical, engineering, and stakeholder engagement are essential.