Associate Solution Consultant – Security Incident Handler

Job Title:

Associate Solution Consultant – Security Incident Handler

About Trellix Trellix is a global company redefining the future of cybersecurity. The company’s comprehensive, open, and native cybersecurity platform helps organizations confronted by today’s most advanced threats gain confidence in the protection and resilience of their operations. Trellix, along with an extensive partner ecosystem, accelerates technology innovation through artificial intelligence, automation, and analytics to empower over 50,000 business and government customers with responsibly architected security.

More at

Develops and delivers detailed IT and cybersecurity solutions through consulting project activities. Responsibilities include client identification through final invoicing for engagements requiring varied interpersonal and technical skills. Technical responsibilities include problem identification, security monitoring, rapid incident response, threat detection, system architecture definition, software specification/design, implementation, testing, client training, and solution deployment. Performance is typically evaluated based on utilization (i.e., billable hours).

Project management activities include interaction with company and client managers and cost/schedule monitoring. May have financial responsibilities including project cost estimating, proposal generation, and invoicing. May participate in sales and proposal presentations in addition to completing ongoing team account activities. Identifies additional product/services opportunities within customer organizations. Performance is typically measured by the capture of the consulting engagement and/or delivery of agreed solutions within budgeted hours.

Trellix Professional Services is seeking a Security Incident Handler with a passion for Cyber Security Defense and a strong understanding of security monitoring and incident response. We have an onsite Elite team—one of the best Cyber Security consulting teams—working directly with our strategic customer as a joint Security Operations Task Force, and growing this piece of the business is a top priority!

This is a full‑time hybrid role (3 days onsite, 2 days remote) with Public Sector Professional Services. You will work hand in hand with the customer’s Cyber Security, IT, and business teams to ensure the highest security around all Trellix Solutions and broader Cyber Security ecosystems. The Computer Security Incident Response Team (CSIRT) is responsible for 24x7x365 security monitoring and rapid incident response across the customer’s environments.

As the ‘tip of the spear’ and the last line of defense protecting customer data and assets from adversaries, you will exercise judgment within broadly defined practices and policies in selecting methods, techniques, and evaluation criteria for obtaining results.

Note:

This position may require occasional after‑business‑hour and weekend on‑call shifts.

Manage and perform client work related to our product service offerings, security monitoring, and incident response. Act as an integral member of the joint Security Operation Task Force and CSIRT team in a 24x7x365 operations environment. Respond to security incidents in a production environment, including investigating/remediating endpoint malware infections and mitigating email‑borne threats (phishing/spam). Conduct host and network forensics during security incidents, analyzing system artifacts (file system, memory, running processes, network connections) for indicators of compromise (IOCs).

Identify and mitigate vulnerabilities using alternate or compensating controls where necessary. Recognize potential security violations, report incidents as…