Microsoft Defender Endpoint Administrator - Remote

Overview

The Microsoft Defender for Endpoint (MDE) Administrator is responsible for the deployment, configuration, and ongoing management of MDE to ensure endpoint security across the organization. This role plays a critical part in the cybersecurity posture of the company, helping to detect, investigate, and respond to threats at the endpoint level.

In Short

• Deploy and configure Microsoft Defender for Endpoint across various platforms.
• Integrate MDE with other Microsoft security solutions.
• Monitor and respond to security alerts using MDE Security Console.
• Manage device onboarding, policies, and threat indicators.
• Collaborate with SOC, IT, and compliance teams.
• Create and maintain custom detection rules and remediation actions.
• Develop documentation including SOPs and incident response playbooks.
• Ensure compliance with organizational policies and regulatory requirements.
• Support vulnerability and patch management processes.
• Stay current with threat intelligence and product updates.

Requirements

• 3+ years of experience in cybersecurity, with 1-2 years managing Microsoft Defender for Endpoint.
• Proficiency in Microsoft 365 Defender, Microsoft Intune, and Azure Active Directory.
• Solid understanding of endpoint detection and response concepts.
• Familiarity with scripting and automation tools.
• Experience with threat hunting and incident response processes.

Benefits

• Work remotely from anywhere.
• Engage in a critical role within the cybersecurity team.
• Opportunity to work with cutting-edge security technologies.
• Collaborate with a diverse team of experts.
• Continuous learning and professional development opportunities.