Remote Trellix Endpoint DLP Engineer

Booz Allen Hamilton; Washington; On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton seeks a Trellix Endpoint DLP Engineer to design, deploy, and operationalize enterprise DLP controls across endpoints. You will own Trellix EDR/DLP components, ensuring data is identified, monitored, and protected, with policy automation and enterprise-wide visibility.

Lead integration with SIEM/SOAR and collaborate with legal, compliance, and HR to shape rulesets and response workflows. The role requires strong analytical skills and the ability to work across security

Qualifications

• 4+ years in cybersecurity engineering, data protection, or endpoint security.
• 2+ years with Trellix Endpoint DLP and Trellix ePO in Windows/Linux environments.
• 2+ years deploying solutions in regulated sectors (healthcare, finance, federal, defense, energy).
• Experience integrating with SIEM, SOAR, identity security platforms and Trellix/McAfee stack.
• Scripting in PowerShell, Python, or Bash for automation and taxonomy creation.
• Ability to interpret data movement patterns and outcomes.
• Active TS/SCI clearance; willingness to polygraph.
• DoD 8570.01-M IAT III and CSP certifications within 45 days of start date.

Responsibilities

• Lead deployment, configuration, tuning, and maintenance of Trellix Endpoint DLP.
• Integrate DLP with SIEM, SOAR, CASB, CMDB, and identity tools for end-to-end visibility.
• Develop playbooks, runbooks, and SOPs for policy lifecycle management.
• Collaborate with legal, compliance, and HR to define rulesets and workflows.
• Manage agent health, upgrades, and enterprise-wide platform stability.
• Analyze telemetry, incidents, and exfiltration patterns to improve controls.

Skills

4+ years cybersecurity engineering

2+ years Trellix Endpoint DLP

2+ years Trellix ePO

2+ years Trellix DLP modules (DLP, DLP

Scripting: PowerShell, Python, Bash

Data movement pattern interpretation

Stakeholder engagement

Zero Trust alignment

Education

HS diploma or GED + IT project experience

Associate’s degree + IT project experience

Bachelor’s degree in IT/CS or related field + IT project experience

Master’s degree in IT/CS or related field + IT project experience

Tools

Trellix Endpoint DLP

Trellix ePO

Windows endpoint management

Linux endpoint management

SIEM

SOAR

DLP Monitor

DLP Discover

ePO

McAfee stack (ENS, DLP, ePO)

Job description

Booz Allen Hamilton seeks a Trellix Endpoint DLP Engineer to design, deploy, and operationalize enterprise DLP controls across endpoints. You will own Trellix EDR/DLP components, ensuring data is identified, monitored, and protected, with policy automation and enterprise-wide visibility.

Lead integration with SIEM/SOAR and collaborate with legal, compliance, and HR to shape rulesets and response workflows. The role requires strong analytical skills and the ability to work across security