Sr Endpoint Engineer with Security Clearance

Description On-site in Washington, DC As a Sr. Security Engineer (Trellix), you will serve as the technical lead for our client's endpoint security and data protection ecosystem. You will balance day-to-day operational support with strategic cybersecurity engineering initiatives while partnering with security operations, infrastructure, application teams, and leadership to strengthen the overall security posture. Due to federal security clearance requirements, applicant must be a United States Citizen with an active Top Secret clearance.

This is a full-time, permanent opportunity, offering a competitive salary and comprehensive benefits package. Qualified applicants must be willing and able to work on a w2 basis. Responsibilities
Lead engineering and administration of Trellix security platforms, including ePO, ENS, EDR, DLP, Drive Encryption (FRP/FRMP), TIE, DXL, Policy Auditor, Rogue System Detection, Trellix Security for Microsoft Exchange (TSME), Application and Change Control (Solidcore), and File Integrity Monitoring (FIM).

Implement and manage application whitelisting, endpoint hardening, encryption, and data protection technologies. Integrate endpoint security with SIEM, SOAR, threat intelligence, and identity management solutions. Develop and maintain DLP policies, device control mechanisms, and data exfiltration prevention controls. Support SOC operations and enhance 24x7 monitoring and incident response capabilities. Create and maintain security engineering standards, SOPs, playbooks, and operational procedures. Support compliance initiatives aligned to federal cybersecurity frameworks and regulations.

Perform analytical troubleshooting and root-cause analysis to improve platform reliability and security outcomes. Experience Requirements
Active TS/SCI security clearance.
5+ years administering and engineering Trellix solutions in a large enterprise. Hands-on expertise with Trellix ePO, ENS, EDR, DLP, Drive Encryption (FRP/FRMP), TIE, DXL, Policy Auditor, Rogue System Detection, TSME, Solidcore, and FIM. Experience with application whitelisting, endpoint hardening, encryption, and data protection. Integration experience with SIEM, SOAR, threat intelligence, and identity platforms.

Strong understanding of endpoint security architecture, threat detection, incident response, and risk management. Experience developing DLP policies, device control, and data exfiltration prevention. Experience supporting SOCs and enhancing 24x7 monitoring and response. Ability to develop standards, SOPs, playbooks, and operational procedures. Experience supporting compliance initiatives aligned with federal frameworks; strong analytical and troubleshooting skills.

Nice to Haves: Insider Risk, Data Protection, or UAM program support; knowledge of CNSSD 504, NIST 800-53, NIST 800-207, and NIST CSF; automation with PowerShell, Python, and REST APIs; integrating Trellix telemetry with SIEM and SOAR; executive dashboards and metrics; FIM implementation for compliance and forensics; JCIP, FISMA, or federal assessment support; familiarity with threat-informed defense and automation frameworks; relevant Trellix, cybersecurity, or cloud certifications.