Data Protection Engineer, Trellix Zero Trust Program

Requirements

Must have:

- Master of Science (MS) degree in Computer Science, Cybersecurity, Information Technology, or a related field.

• Over 10 years of relevant technical experience.
• At least 5 years of hands-on experience with Trellix (McAfee) ePolicy Orchestrator (ePO) and Data Loss Prevention (DLP) Endpoint products.
• In-depth knowledge of Device Control policies for secure management of removable storage and peripheral devices.
• Strong ability to create custom data identifiers using Regular Expressions (Regex) and dictionaries for sensitive information detection.
• Proven troubleshooting skills for complex issues on Windows endpoints, including resolving conflicts with other security software.
• Active Top-Secret clearance with SCI eligibility.

Preferred Experience &

Skills

• Familiarity with Air-Gapped or isolated network environments (e.g., JWICS, SAPs).
• Knowledge of Trellix Endpoint Security (ENS) and Threat Intelligence Exchange (TIE/DXL).
• Experience with data classification integration tools like Kiteworks or Boldon James.
• Proficiency with Splunk for log analysis and dashboard creation.

Responsibilities:

- Lead the design and configuration of Trellix DLP Endpoint policies in the ePolicy Orchestrator (ePO) for SIPR and Top-Secret networks.

• Develop and fine-tune intricate data classification rules and regex patterns to accurately recognize USSOCOM sensitive data types while minimizing false positives.
• Oversee the lifecycle of the ePO environment on the Top-Secret network, managing the manual transfer of policy updates and patches.
• Configure integration between Trellix and other security components to enhance DLP inspection capabilities.
• Act as the Tier 3 escalation point for DLP incidents by analyzing blocked actions and coordinating with SOC/SIEM for proper alert management.

Company:

At Kentro, we are thankful for your interest as we innovate towards opportunities and collaboratively strive for success. Our vibrant community of professionals is dedicated to enhancing our clients missions, promoting career advancement, and positively impacting our communities. As a member of our supportive environment, we prioritize your personal and professional growth. We are currently looking for a Data Protection Engineer (Trellix) to join our SIPR and Top-Secret Network Execution Teams, focusing on a major Zero Trust transformation at U.S.

Special Operations

Command (USSOCOM). This role will be located onsite in Tampa, FL, and is expected to last 18 months, with possible extension.