Trellix - Endpoint Security Encryption

Trellix - Endpoint Security Encryption

Location: Mumbai (Andheri East)

Mode: Hybrid

Job Summary

The ITCI Cybersecurity team is seeking an Endpoint Security Specialist (L2) to support and maintain enterprise antivirus and encryption solutions across desktops, laptops, and mobile endpoints. This role is responsible for administering Trellix (ePO, ENS, Drive Encryption) platforms, enforcing endpoint protection policies, ensuring compliance, and providing L2-level incident response support. The specialist will work closely with L3 security engineers, EUC (End User Computing) teams, and incident response teams to strengthen endpoint defense posture.

Key Responsibilities

• Administer Trellix ePolicy Orchestrator (ePO), including policy configuration, agent deployment, health monitoring, and reporting.
• Deploy, configure, and manage antivirus agents (Trend Micro Apex One, Trellix ENS) across managed endpoints.
• Ensure real-time protection, policy enforcement, and consistent update of antivirus signatures/definitions.
• Administer Trellix Drive Encryption (FDE), including key recovery, user assistance, and decryption requests.
• Investigate malware infections, quarantined events, and suspicious activities; initiate remediation workflows.
• Monitor endpoint compliance dashboards (ePO, Trend Micro console, Defender portal) and generate weekly/monthly reports.
• Work with EUC teams to enforce device security controls such as USB restrictions, application whitelisting, and device lockdown policies.
• Support L3 engineers in Trellix/Trend policy rollouts, signature tuning, and exception list creation.
• Conduct forensic data/artifact collection from infected endpoints in line with IR protocols.
• Participate in root cause analysis (RCA) for repeated infections and propose corrective measures.
• Assist with endpoint onboarding/offboarding for Trellix and other protection platforms.