Cyber Security Architect/Engineer (Trellix Endpoint DLP Engineer) - JB - (3414)

The most security-conscious organizations trust Telos Corporation to protect their vital IT assets. The reputation of our company rests on the quality of our solutions and the integrity of our people. Explore what you can bring to our solutions in the areas of cyber, cloud and enterprise security.

Be a part of the Telos culture and see what sets us apart! Telos offers an excellent compensation package with benefits that include generous paid time off, medical, dental, vision, tuition reimbursement, and 401k. Our employees enjoy more than just a great work environment!

This position will be based at Reston, VA

Responsibilities:

• Design, deploy, manage, and operationalize enterprise endpoint data protection controls as a Trellix Endpoint Data Loss Prevention (DLP) Engineer.
• Serve as the technical owner for Trellix EDR/DLP components, ensuring sensitive data is identified, monitored, and protected across the enterprise.
• Use analytical, engineering, and stakeholder engagement capabilities to assist with information protection strategy.
• Play a core role in safeguarding the organization's data.
• Build an enterprise-grade data protection program with visibility across security leadership, risk, and operational teams.
• Lead enterprise deployment, configuration, tuning, and maintenance of Trellix Endpoint DLP, including policy automation, agent health, and performance optimization.
• Assist with analyzing, testing, and operationalizing DLP policies, rulesets, classification logic, and incident workflows aligned to data governance requirements.
• Integrate the Trellix DLP platform with SIEM, SOAR, CASB, CMDB, and identity security tools for end-to-end visibility and automated response.
• Analyze DLP telemetry, alerts, and incidents to identify data exfiltration patterns, risk signals, and false positives.
• Partner with legal, compliance, data governance, and HR to define rulesets, thresholds, and exception workflows.
• Develop engineering playbooks, standard operating procedures, and runbooks for policy lifecycle management.
• Manage endpoint agent health, upgrades, change control, and enterprise-wide platform stability.
• Conduct root-cause analysis for user-impact, policy misfires, broken workflows, and endpoint inventory issues.
• Provide guidance to application and business teams on data classification, tagging, and secure data-handling practices.
• Align DLP implementations with Zero Trust, privacy, and enterprise data protection strategies.

Qualifications:

• 4+ years of experience in cybersecurity engineering, data protection, or endpoint security
• 2+ years of experience with Trellix Endpoint DLP, Trellix ePO, associated modules, agent-based controls, and Windows and Linux endpoint management and troubleshooting
• 2+ years of experience developing and deploying solutions for highly regulated industries such as healthcare, finance, federal, defense, and energy
• Experience with integration patterns across SIEM, SOAR, and identity security platforms, and broader Trellix or McAfee security stack such as ENS, DLP Monitor, DLP Discover, and ePO
• Experience with scripting in PowerShell, Python, or Bash for automation and workflow optimization, creating classification taxonomies, and integrating DLP with enterprise data catalogs
• Ability to interpret data movement patterns and policy outcomes
• Active TS/SCI clearance; willingness to take a polygraph exam
• Bachelor’s degree and 5+ years of experience supporting IT projects and activities, or Master’s degree and 1+ years of experience supporting IT projects and activities. Years of experience may be accepted in lieu of degree
• DoD 8570.01-M Information Assurance Technician (IAT) Level II Certification such as Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND Certification
• Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider - Infrastructure Support Certification such as CEH, CHFI, CFR, Cloud+, or CND Certification, within 30 days of start date
• Knowledge of data loss prevention concepts, endpoint security controls, and data classification models
• Possession of strong analytical skills

The successful candidate must meet eligibility requirements to access sensitive information, which requires US citizenship.

Telos maintains a drug-free workplace and will conduct drug testing on all applicants who have accepted an offer of employment.

Telos Corporation participates in the E-Verify program. Therefore, any employment with Telos will also be contingent upon confirmation from the Social Security Administration ("SSA") and/or the Department of Homeland Security ("DHS") of your authorization to work in the United States. Telos offers excellent compensation packages including salary commensurate with experience and benefits to meet your needs for today and the future.

Telos Corporation and its subsidiaries are committed to equal opportunity for all, without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, age, veteran status, disability, genetic information, or any other protected characteristic. Telos Corporation will make reasonable accommodations for known physical or mental limitations of otherwise qualified employees and applicants with disabilities unless the accommodation would impose an undue hardship on the operation of our business. If you are interested in applying for an employment opportunity and feel you need a reasonable accommodation pursuant to the ADA, please contact us at 1-800-283-1911. If you require relay service assistance, please click on the following link to review information on your state's relay service: https://www.fcc.gov/accessibility.

Telos Corporation is an EEO/AA employer.