Trellix L2 SME

Our client is seeking a Trellix L2 Subject Matter Expert (SME) in Riyadh. The role involves managing and optimizing enterprise endpoint security using Trellix solutions, which includes deployment, configuration, and maintenance of agents and sensors, as well as supporting the Security Operations Center (SOC) in threat detection and incident response.

Key Responsibilities:

• Serve as the primary technical authority for Trellix endpoint security solutions, including ePolicy Orchestrator (ePO) and agent deployment.
• Lead the deployment, configuration, and ongoing maintenance of Trellix agents, sensors, and security components across multiple operating systems.
• Troubleshoot and resolve complex, high-priority endpoint security issues, performing deep-dive analysis as needed.
• Support the Security Operations Center (SOC) with threat detection, investigation, and remediation activities.
• Develop, enforce, and continuously optimize endpoint security policies and standard operating procedures (SOPs).
• Maintain comprehensive documentation, including system configurations, SOPs, incident reports, and audit logs.

Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent practical experience).
• Relevant security certifications preferred, such as Trellix / McAfee certifications, CEH, GCED, GCIH, or similar cybersecurity certifications.
• Experience working in enterprise-scale environments with large endpoint estates.
• Minimum of 5 years of experience in endpoint detection and response (EDR) technologies and methodologies.
• Proven hands-on expertise with Trellix products, including Trellix ePO, Endpoint Security (ENS), and Trellix HX (Endpoint Threat Defense).
• Strong experience with Windows, Linux, and macOS endpoint environments.
• Solid understanding of malware analysis, threat hunting, and incident response processes.
• Excellent communication skills in both Arabic and English.

Location: Riyadh, Saudi Arabia
Work Conditions: On-site, Full-time