Endpoint Security Expert

Duties & Requirements

Position: CSU Brussels – Endpoint Security Expert
Reference Number: C005192
Equivalent NATO Grade: G12
Work Location: Brussels, Belgium
Security Clearance: NATO Secret

1. Main Duties and Responsibilities

The Endpoint Security Expert will be responsible for managing, maintaining and improving NATO's endpoint security environment, with a particular focus on Trellix security products.

Key responsibilities include:

1. Endpoint Security Management

• Manage the complete lifecycle of assigned endpoint security products.
• Maintain and develop security policies, configurations, baselines, exclusions and exceptions.
• Ensure endpoint security solutions are aligned with NATO security requirements and industry best practices.

2. Trellix Product Management

• Manage the full range of Trellix products, including Threat Prevention, Application Control, Host Firewall, Data Loss Prevention (DLP) and Drive Encryption.
• Plan, coordinate and lead Trellix product upgrades at least every two months.
• Deploy upgrades across Windows laptops, workstations, VDI environments, and Windows/Linux servers.

3. Security Operations and Incident Response

• Support incident response activities in collaboration with CSU teams and the Service Desk.
• Investigate and troubleshoot Trellix-related incidents and technical problems.
• Analyse security events, logs, alerts and endpoint data exchanges.
• Perform root cause analysis and resolve performance-related issues.

4. Security Policy Implementation

• Test and implement NATO endpoint security policies.
• Optimise security configurations and policies to balance protection and system performance.
• Manage security exceptions through established approval procedures.

5. Technical Advisory and Collaboration

• Provide technical expertise and guidance on endpoint security architecture and engineering decisions.
• Work closely with IT administrators, security teams and other stakeholders.
• Ensure endpoint configurations meet security standards and operational requirements.

6. Documentation and Continuous Improvement

• Develop and maintain Standard Operating Procedures (SOPs).
• Document technical processes, configurations and operational procedures.
• Contribute to the continuous improvement of endpoint security processes, standards and governance.
• Promote knowledge sharing across technical teams.

2. Required Skills, Knowledge and Experience

• Trellix expertise: Recent hands‑on experience implementing and managing the full range of Trellix products.
• Endpoint security: Strong experience securing Windows endpoints and Windows/Linux servers.
• IT service management: Experience working in complex IT environments and following ITIL processes.
• Incident management: Strong troubleshooting, root cause analysis and problem‑solving capabilities.
• Security analysis: Ability to analyse security events, logs, alerts and endpoint data.
• Communication: Strong communication and coordination skills when working with multiple technical teams.
• Documentation: Ability to produce technical documentation, SOPs and knowledge‑sharing materials.
• Independence: Ability to work autonomously, take ownership and drive technical issues to resolution.
• Analytical skills: Strong analytical and technical assessment capabilities.

3. Contract and Working Conditions

• Requirement number: C005192
• Location: Brussels, Belgium
• NATO grade: G12
• Start date: 7 December 2026
• End date: 30 December 2026
• Total effort: 300 hours
• Working arrangement: 100% on‑site
• Remote work: Limited possibility, approximately 1 day per week
• Security clearance: NATO Secret
• Travel: None
• Working environment: Normal, non-smoking office environment

4. Ideal Candidate Profile

The ideal candidate is a senior Endpoint Security Engineer / Trellix Security Specialist with extensive practical experience managing enterprise endpoint protection solutions in a complex, security‑sensitive IT environment.

The candidate should demonstrate:

• In‑depth knowledge of the Trellix product portfolio.
• Hands‑on experience with Trellix ePolicy Orchestrator (ePO) and endpoint security administration.
• Experience managing security policies across large Windows and Linux environments.
• Proven experience planning and executing enterprise‑wide security product upgrades.
• Strong understanding of endpoint security architecture, incident response and troubleshooting.
• Familiarity with ITIL‑base