Sr. Security Engineer (Trellix)

Eliassen Group; Washington (District of Columbia); On-site; USD 150,000 - 170,000; Full time

Job summary

Eliassen Group in Washington, DC seeks a Sr. Security Engineer (Trellix) to serve as the technical lead for our client’s endpoint security and data protection ecosystem. The role balances day-to-day support with strategic cybersecurity engineering in collaboration with security operations and leadership.

Active TS/SCI clearance is required, and this is a full-time, on-site position offering a competitive salary and benefits on a W2 basis.

Qualifications

• Active TS/SCI security clearance.
• 5+ years administering and engineering Trellix solutions in a large enterprise.
• Hands-on experience with Trellix ePO, ENS, EDR, DLP, Drive Encryption (FRP/FRMP), TIE, DXL, Policy Auditor, Rogue System Detection, TSME, Application and Change Control (Solidcore), and FIM.
• Experience implementing application whitelisting, endpoint hardening, encryption, and data protection technologies and integrating with SIEM, SOAR, threat intelligence, and identity platforms.
• Strong understanding of endpoint security architecture, cyber threat detection, incident response, and risk management principles.
• Experience developing and maintaining DLP policies, device control, and data exfiltration prevention controls.
• Experience supporting SOCs and improving 24x7 monitoring and response.
• Ability to develop standards, SOPs, playbooks, and procedures.
• Experience supporting compliance initiatives aligned to federal frameworks and regulations; strong analytical and troubleshooting skills.
• Nice to have: Insider Risk, Data Protection, or UAM program support; knowledge of CNSSD 504, NIST 800-53, NIST 800-207, and NIST CSF; automation with PowerShell, Python, REST APIs; integrating Trellix telemetry with SIEM and SOAR; executive dashboards and metrics; FIM for compliance and forensics; experience with JCIP or FISMA; familiarity with threat-informed defense and automation frameworks; relevant Trellix, cybersecurity, or cloud certifications.

Responsibilities

• Serve as technical lead for Trellix endpoint security and data protection capabilities across the enterprise.
• Administer and engineer Trellix ePO, ENS, EDR, DLP, Drive Encryption (FRP/FRMP), TIE, DXL, Policy Auditor, Rogue System Detection, TSME, Application and Change Control (Solidcore), and FIM.
• Implement and manage application whitelisting, endpoint hardening, encryption, and data protection technologies.
• Integrate endpoint security platforms with SIEM, SOAR, threat intelligence, and identity management solutions.
• Develop and maintain DLP policies, device control mechanisms, and data exfiltration prevention controls.
• Support SOC operations and enhance 24x7 threat monitoring and response capabilities.
• Develop security engineering standards, SOPs, playbooks, and operational procedures.
• Support compliance initiatives aligned with federal cybersecurity frameworks and regulations.
• Design dashboards, metrics, and operational reporting for cybersecurity stakeholders.
• Develop automation and orchestration workflows using scripting and APIs where applicable.

Skills

Trellix admin

Endpoint security

SIEM integration

SOAR integration

DLP policy

Threat detection

Incident response

Compliance support

Automation scripting

Tools

Trellix ePO

Trellix ENS

Trellix EDR

Trellix DLP

Drive Encryption FRP/FRMP

TIE

DXL

Policy Auditor

Rogue System Detection

Solidcore / FIM

TSME

Job description

Description:

On-site in Washington, DC

As a Sr. Security Engineer (Trellix), you will serve as the technical lead for our client's endpoint security and data protection ecosystem. You will balance day-to-day operational support with strategic cybersecurity engineering initiatives while partnering with security operations, infrastructure, application teams, and leadership to strengthen the overall security posture.

Due to federal security clearance requirements, the applicant must be a United States Citizen with an active Top Secret clearance. This is a full-time, permanent opportunity, offering a competitive salary and comprehensive benefits package. Qualified applicants must be willing and able to work on a w2 basis.

Salary: $150,000 - $170,000/ yr. w2

Responsibilities:

• Serve as technical lead for Trellix endpoint security and data protection capabilities across the enterprise.
• Administer and engineer Trellix ePO, ENS, EDR, DLP, Drive Encryption (FRP/FRMP), TIE, DXL, Policy Auditor, Rogue System Detection, TSME, Application and Change Control (Solidcore), and FIM.
• Implement and manage application whitelisting, endpoint hardening, encryption, and data protection technologies.
• Integrate endpoint security platforms with SIEM, SOAR, threat intelligence, and identity management solutions.
• Develop and maintain DLP policies, device control mechanisms, and data exfiltration prevention controls.
• Support SOC operations and enhance 24x7 threat monitoring and response capabilities.
• Develop security engineering standards, SOPs, playbooks, and operational procedures.
• Support compliance initiatives aligned with federal cybersecurity frameworks and regulations.
• Design dashboards, metrics, and operational reporting for cybersecurity stakeholders.
• Develop automation and orchestration workflows using scripting and APIs where applicable.

Experience Requirements:

• Active TS/SCI security clearance.
• 5+ years administering and engineering Trellix solutions in a large enterprise.
• Hands-on experience with Trellix ePO, ENS, EDR, DLP, Drive Encryption (FRP/FRMP), TIE, DXL, Policy Auditor, Rogue System Detection, TSME, Application and Change Control (Solidcore), and FIM.
• Experience implementing application whitelisting, endpoint hardening, encryption, and data protection technologies and integrating with SIEM, SOAR, threat intelligence, and identity platforms.
• Strong understanding of endpoint security architecture, cyber threat detection, incident response, and risk management principles.
• Experience developing and maintaining DLP policies, device control, and data exfiltration prevention controls.
• Experience supporting SOCs and improving 24x7 monitoring and response.
• Ability to develop standards, SOPs, playbooks, and procedures.
• Experience supporting compliance initiatives aligned to federal frameworks and regulations; strong analytical and troubleshooting skills.
• Nice to have: Insider Risk, Data Protection, or UAM program support; knowledge of CNSSD 504, NIST 800-53, NIST 800-207, and NIST CSF; automation with PowerShell, Python, REST APIs; integrating Trellix telemetry with SIEM and SOAR; executive dashboards and metrics; FIM for compliance and forensics; experience with JCIP or FISMA; familiarity with threat-informed defense and automation frameworks; relevant Trellix, cybersecurity, or cloud certifications.