Security Analyst, L2 Support Engineer Endpoint (Contract)

Security Analyst L2 Support Engineer - Endpoint Security Migration

Duration: 13-week contract

Key Responsibilities

. Provide L2 support for Microsoft Defender for Endpoint onboarding, Defender Antivirus, EDR configuration, Attack Surface Reduction rules, and Intune endpoint security policies.

. Investigate device policy status, endpoint configuration gaps, AV exclusions, ASR behavior, onboarding issues, connector status, logs, screenshots, and other troubleshooting evidence.

. Support go-live and Hypercare discussions related to MDE deployment, policy rollout, endpoint security transition, and post-implementation stabilization.

. Coordinate with endpoint, Intune, identity, SOC, and security teams to validate root cause, confirm remediation steps, and drive issue closure.

. Escalate complex or unresolved issues to L3 engineers, SMEs, or architects where deeper platform or design input is required.

. Maintain clear issue trackers, action notes, closure records, and support documentation throughout Hypercare and warranty support.

Required Skills

. Hands-on experience with Microsoft Defender for Endpoint, Defender Antivirus, EDR, Attack Surface Reduction, and Intune policy deployment.

. Strong troubleshooting skills across endpoint security operations, policy behavior, deployment exceptions, and evidence-based technical triage.

. Familiarity with Entra ID Conditional Access, SOC integration touchpoints, Microsoft Sentinel or Splunk inputs, and enterprise support governance.

. Ability to communicate investigation findings clearly to IT and security stakeholders and manage L2 issues through closure or escalation.

Qualifications and Preferred Experience

. Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline is preferred.

. Microsoft certifications such as SC-200, MD-102, SC-900, SC-100, AZ-500, or SC-300 are desirable.

. Experience in large enterprise endpoint security environments, Defender Antivirus transition, MDE onboarding, Intune-based Defender policy deployment, Hypercare, warranty support, or regulated environments is advantageous.