Endpoint security is where a lot of good intentions meet a lot of real machines. A multinational defence organisation in Brussels needs someone who genuinely knows the Trellix product range and can run it across a mixed Windows and Linux estate — not just install it, but keep it healthy, tuned and understood.

The role mixes engineering with service delivery: high availability matters, ITIL process matters, and so does the ability to take an alert nobody can explain and follow it to its root cause.

What you would be doing

• Implement and manage the full range of Trellix products — threat prevention, application control, host firewall, data loss prevention, drive encryption and the rest — on Windows end user devices and on Windows and Linux servers.
• Deliver that service in a complex IT environment, following ITIL processes and keeping availability high.
• Analyse security events, logs, alerts and endpoint data exchange.
• Drive root cause analysis and problem solving on issues that do not resolve themselves.
• Document what you do and share the knowledge so the team is not dependent on one person.
• Take ownership of technical issues and see them through.

What we are looking for

• Recent, hands-on experience implementing and managing the Trellix product range across Windows and Linux.
• Service delivery experience in a complex IT environment, working to ITIL processes.
• Strong root cause and problem-solving skills, and strong analytical skills generally.
• Strong documentation and knowledge-sharing habits.
• The ability to work independently and take ownership.
• Strong communication and coordination skills.

The role is based in Brussels, Belgium, on site for most daily activity with a limited possibility of one day a week remote, from early November to the end of December 2026.