Endpoint Security Engineer - Trellix (Q/Top Secret Clearance) with Security Clearance

ShorePoint, LLC; Washington (District of Columbia); On-site; USD 150,000 - 230,000; Full time

Benefits offered by this job

PTO 144 hours

11 holidays

Health insurance

401(k)

Education support

Certification reimbursement

Job summary

ShorePoint, LLC is seeking an Endpoint Security Engineer - Trellix (Q/Top Secret) to deliver advanced cybersecurity engineering, administration and operations for Trellix platforms in a high‑threat environment. The role emphasizes secure, compliant endpoint security services with policy enforcement and risk reduction.

You will administer Trellix ePO, ENS, DLP, and related tools while integrating with SIEM/SOAR and Zero Trust frameworks.

Qualifications

• Bachelor’s degree from an accredited university.
• 10+ years of relevant experience; a postgraduate degree may substitute for 6 years.
• Hands-on Trellix administration in enterprise environments.
• Proficiency with Trellix ePO, ENS, DLP, ATP, Agent Handler configuration, policy management and troubleshooting.
• Experience analyzing security events, writing custom queries and performing root cause analysis.
• Strong understanding of cybersecurity principles, defense-in-depth and endpoint security operations.
• Familiarity with NIST SP 800-53, FISMA and federal cybersecurity frameworks.
• Ability to work with cross-functional teams and communicate technical information to varied audiences.
• Applicants must hold and maintain an active DOE Q or equivalent DoD Top Secret clearance and eligible to obtain and maintain SCI clearance.

Responsibilities

• Administer Trellix ePO, ENS, DLP and related enterprise security tools.
• Monitor, tune and optimize Trellix systems for performance, threat detection effectiveness and policy compliance.
• Lead or support Trellix upgrades, patch management, rule tuning and agent health monitoring.
• Develop and maintain security policies, dashboards, reports and custom queries within the Trellix ecosystem.
• Integrate Trellix tools with SIEM, SOAR, identity and Zero Trust-aligned security services.
• Support incident response activities through data collection, forensic assistance, containment actions and coordinated security actions using Trellix tools.
• Provide security engineering input for cybersecurity assessments, audits and A&A artifacts.
• Coordinate with cybersecurity, network and systems engineering teams to align Trellix security enforcement with mission requirements.
• Assist in documenting system configurations, change records, SOPs and security baselines.
• Evaluate new Trellix capabilities and roadmap items to support modernization and Zero Trust initiatives.

Skills

Trellix ePO

Trellix ENS

Trellix DLP

Trellix ATP

SIEM

SOAR

Zero Trust

Incident response

Policy management

Education

Bachelor's degree

Job description

Who we are: ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a “work hard, play hard” mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community.

The Perks: As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual’s technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, major carriers for healthcare providers. Highlighted benefits include 144 hours of PTO, 11 holidays, 85% of insurance premiums covered, a 401(k), continuing education, certification maintenance and reimbursement and more.

Who we’re looking for: We are seeking an Endpoint Security Engineer - Trellix (Q/Top Secret Clearance) to provide advanced cybersecurity engineering, administration and operational support for Trellix enterprise security platforms. This role supports secure, compliant and resilient endpoint and enterprise security services through system administration, threat detection optimization and integration with enterprise security capabilities. The position Endpoint Security Engineer (Trellix) requires hands‑on Trellix expertise and knowledge of federal cybersecurity requirements and Zero Trust Architecture (ZTA) frameworks. This is a unique opportunity to shape the growth, development and culture of an exciting and fast‑growing company in the cybersecurity market.

What you’ll be doing:

• Administer, configure and maintain Trellix ePolicy Orchestrator (ePO), Endpoint Security (ENS), Data Loss Prevention (DLP) and related enterprise security tools.
• Monitor, tune and optimize Trellix systems for performance, threat detection effectiveness and policy compliance.
• Lead or support Trellix upgrades, patch management, rule tuning and agent health monitoring.
• Develop and maintain security policies, dashboards, reports and custom queries within the Trellix ecosystem.
• Integrate Trellix tools with Security Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), identity and Zero Trust-aligned security services.
• Support incident response activities through data collection, forensic assistance, containment actions and coordinated security actions using Trellix tools.
• Provide security engineering input for cybersecurity assessments, audits and Assessment and Authorization (A&A) artifacts.
• Coordinate with cybersecurity, network and systems engineering teams to align Trellix security enforcement with mission requirements.
• Assist in documenting system configurations, change records, standard operating procedures (SOPs) and security baselines.
• Evaluate new Trellix capabilities and roadmap items to support modernization and Zero Trust initiatives. What you need to know:
• Understanding of enterprise endpoint security administration, including security policy enforcement, system performance optimization and threat detection.
• Knowledge of security technology integrations, incident response support and ZTA principles. Must have’s:
• Bachelor’s degree from an accredited university.
• 10+ years of relevant experience. A postgraduate degree from an accredited university in a related field may substitute for 6 years of experience.
• Demonstrated hands‑on experience administering Trellix (McAfee) cybersecurity platforms in enterprise environments.
• Demonstrated proficiency with Trellix ePO, ENS, DLP, ATP, Agent Handler configuration, policy management and troubleshooting.
• Experience analyzing security events, writing custom queries and performing root cause analysis.
• Strong understanding of cybersecurity principles, defense‑in‑depth and endpoint security operations.
• Familiarity with NIST SP 800‑53, FISMA and federal cybersecurity frameworks.
• Ability to work with cross‑functional teams and communicate technical information to varied audiences.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Applicants must hold and maintain an active DOE Q or equivalent DoD Top Secret clearance and eligible to obtain and maintain a Sensitive Compartmented Information (SCI) clearance, in compliance with federal contract requirements. Beneficial to have:
• Direct experience supporting cybersecurity operations for Department of Energy (DOE) Headquarters, National Nuclear Security Administration (NNSA) or DOE National Laboratories.
• Familiarity with Intelligence Community cybersecurity requirements, including Committee on National Security Systems Instruction (CNSSI) 1253, Intelligence Community Directive (ICD) 503 and Intelligence Community ZTA frameworks.
• Understanding of current Intelligence Community Zero Trust compliance efforts, including identity‑centric access control, continuous authentication, device health attestation and segmentation strategies.
• Experience implementing or integrating Trellix technology into ZTAs.
• Knowledge of DOE policies, including DOE Order 205.1C, DOE Chief Information Officer cybersecurity notices and programmatic cybersecurity compliance efforts.
• Experience working in highly regulated, sensitive or classified mission environments.
• Relevant certifications, such as Trellix/McAfee, Certified Information Systems Security Professional (CISSP) or CompTIA Security+. Where it’s done:
• Onsite (Washington, DC).