Endpoint Security Engineer - Trellix (Q/Top Secret Clearance)

ShorePoint, LLC; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

PTO 144 hours

Holidays

Health insurance

401(k)

Education reimbursement

Job summary

ShorePoint, LLC is seeking an experienced Endpoint Security Engineer (Trellix) to provide advanced cybersecurity engineering and operations for Trellix platforms. You will ensure secure, compliant endpoint and enterprise security services, integrating with SIEM and SOAR while supporting incident response and A&A artifacts.

Ideal candidates hold active DOE Q or equivalent DoD Top Secret clearance and have hands-on Trellix administration in large enterprise environments.

Qualifications

• Bachelor’s degree required.
• 10+ years of relevant experience; a postgraduate degree may substitute for 6 years.
• Hands-on Trellix security platform administration in enterprise.
• Proficient Trellix ePO, ENS, DLP, ATP, Agent Handler configuration/troubleshooting.
• Experience analyzing security events and writing custom queries.
• Ability to work with cross-functional teams and communicate technical information.

Responsibilities

• Administer Trellix ePO, ENS, DLP and related tools.
• Monitor and optimize Trellix systems for performance and policy compliance.
• Lead or support Trellix upgrades, patching and health checks.
• Develop security policies, dashboards and reports in Trellix ecosystem.
• Integrate Trellix with SIEM/SOAR and Zero Trust services.
• Support incident response activities and forensics.
• Contribute to A&A artifacts and security baselines.

Skills

Trellix endpoint security

Security incident response

Threat detection optimization

Policy management

Cross-functional comms

Education

Bachelor’s degree

Postgraduate degree substitute

Tools

Trellix ePO

Trellix ENS

Trellix DLP

Trellix ATP

Agent Handler

SIEM tooling

Job description

Who We Are

ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a “work hard, play hard” mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community.

Who We Are

ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a “work hard, play hard” mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community.

The Perks

As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual’s technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, major carriers for healthcare providers. Highlighted benefits include 144 hours of PTO, 11 holidays, 85% of insurance premiums covered, a 401(k), continuing education, certification maintenance and reimbursement and more.

Who We’re Looking For

We are seeking an Endpoint Security Engineer - Trellix (Q/Top Secret Clearance) to provide advanced cybersecurity engineering, administration and operational support for Trellix enterprise security platforms. This role supports secure, compliant and resilient endpoint and enterprise security services through system administration, threat detection optimization and integration with enterprise security capabilities. The position Endpoint Security Engineer (Trellix) requires hands‑on Trellix expertise and knowledge of federal cybersecurity requirements and Zero Trust Architecture (ZTA) frameworks. This is a unique opportunity to shape the growth, development and culture of an exciting and fast‑growing company in the cybersecurity market.

What You’ll Be Doing

• Administer, configure and maintain Trellix ePolicy Orchestrator (ePO), Endpoint Security (ENS), Data Loss Prevention (DLP) and related enterprise security tools.
• Monitor, tune and optimize Trellix systems for performance, threat detection effectiveness and policy compliance.
• Lead or support Trellix upgrades, patch management, rule tuning and agent health monitoring.
• Develop and maintain security policies, dashboards, reports and custom queries within the Trellix ecosystem.
• Integrate Trellix tools with Security Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), identity and Zero Trust‑aligned security services.
• Support incident response activities through data collection, forensic assistance, containment actions and coordinated security actions using Trellix tools.
• Provide security engineering input for cybersecurity assessments, audits and Assessment and Authorization (A&A) artifacts.
• Coordinate with cybersecurity, network and systems engineering teams to align Trellix security enforcement with mission requirements.
• Assist in documenting system configurations, change records, standard operating procedures (SOPs) and security baselines.
• Evaluate new Trellix capabilities and roadmap items to support modernization and Zero Trust initiatives.

What You Need To Know

• Understanding of enterprise endpoint security administration, including security policy enforcement, system performance optimization and threat detection.
• Knowledge of security technology integrations, incident response support and ZTA principles.

Must Have’s

• Bachelor’s degree from an accredited university.
• 10+ years of relevant experience. A postgraduate degree from an accredited university in a related field may substitute for 6 years of experience.
• Demonstrated hands‑on experience administering Trellix (McAfee) cybersecurity platforms in enterprise environments.
• Demonstrated proficiency with Trellix ePO, ENS, DLP, ATP, Agent Handler configuration, policy management and troubleshooting.
• Experience analyzing security events, writing custom queries and performing root cause analysis.
• Strong understanding of cybersecurity principles, defense‑in‑depth and endpoint security operations.
• Familiarity with NIST SP 800‑53, FISMA and federal cybersecurity frameworks.
• Ability to work with cross‑functional teams and communicate technical information to varied audiences.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Applicants must hold and maintain an active DOE Q or equivalent DoD Top Secret clearance and eligible to obtain and maintain a Sensitive Compartmented Information (SCI) clearance, in compliance with federal contract requirements.

Beneficial To Have

• Direct experience supporting cybersecurity operations for Department of Energy (DOE) Headquarters, National Nuclear Security Administration (NNSA) or DOE National Laboratories.
• Familiarity with Intelligence Community cybersecurity requirements, including Committee on National Security Systems Instruction (CNSSI) 1253, Intelligence Community Directive (ICD) 503 and Intelligence Community ZTA frameworks.
• Understanding of current Intelligence Community Zero Trust compliance efforts, including identity‑centric access control, continuous authentication, device health attestation and segmentation strategies.
• Experience implementing or integrating Trellix technology into ZTAs.
• Knowledge of DOE policies, including DOE Order 205.1C, DOE Chief Information Officer cybersecurity notices and programmatic cybersecurity compliance efforts.
• Experience working in highly regulated, sensitive or classified mission environments.
• Relevant certifications, such as Trellix/McAfee, Certified Information Systems Security Professional (CISSP) or CompTIA Security+.

Where It’s Done

• Onsite (Washington, DC).