This listing doesn't post a salary. Most similar roles pay
$168,500–$236,262.
Based on 240 similar postings.
Employer
About Booz Allen Hamilton
Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting
Booz Allen Hamilton currently has
1159 open roles
on FindRole.
Listed pay typically runs
$86,800–$198,000
across 804 roles with salary data.
As a Trellix Endpoint DLP Engineer, you will serve as the technical owner for Trellix EDR and DLP components to protect sensitive data across the enterprise. You will design, deploy, manage, and operationalize endpoint protection controls, including policy automation, agent health, and performance optimization. Your daily responsibilities involve analyzing telemetry to identify exfiltration patterns, developing engineering playbooks, and managing rule sets for classification logic. You will integrate the Trellix platform with SIEM, SOAR, CASB, CMDB, and identity security tools while collaborating with legal and compliance teams. The role requires proficiency in Trellix ePO, Windows and Linux management, and scripting using PowerShell, Python, or Bash. This position addresses critical information protection challenges within highly regulated industries like healthcare, finance, and defense to ensure robust data governance and zero trust alignment.
Deploy, configure, and maintain Trellix Endpoint DLP policies, agent health, and performance optimizations.
Analyze telemetry and alerts to identify data exfiltration patterns and reduce false positives.
Integrate the Trellix platform with SIEM, SOAR, CASB, and identity security tools for automated response.
Develop engineering playbooks, standard operating procedures, and runbooks for policy lifecycle management.
Perform root-cause analysis for user impacts, policy misfires, and endpoint inventory issues.
Partner with legal, compliance, and HR teams to define data classification rules and exception workflows.
Provide guidance to business units on data tagging and secure handling practices.
What we're looking for
4+ years of experience in cybersecurity engineering, data protection, or endpoint security.
2+ years of experience with Trellix Endpoint DLP, Trellix ePO, and Windows/Linux endpoint management.
2+ years of experience developing solutions for highly regulated industries like healthcare, finance, or defense.
Experience with scripting in PowerShell, Python, or Bash for automation and workflow optimization.
Active TS/SCI clearance and willingness to take a polygraph exam.
Must meet specific education and experience combinations: HS diploma with 7+ years, Associate's with 5+ years, Bachelor's with 3+ years, or Master's with 1+ year of IT experience.
Ability to obtain DoD 8570.01-M IAT Level III Certification (e.g., SecurityX, CISSP) within 45 days of start date.
Ability to obtain DoD 8570.01-M Cybersecurity Service Provider - Infrastructure Support Certification (e.g., CEH, Cloud+) within 45 days of start date.