Job Description:
- Experienced in Microsoft Defender for Endpoint support, technical troubleshooting, and client-facing operational engagement.
- Focus on L2 MDE support, deeper issue investigation, policy deployment troubleshooting, stakeholder coordination, and escalation management during go-live, Hypercare, and warranty support.
- Provide L2 support for endpoint security migration activities focused on Microsoft Defender for Endpoint, Defender Antivirus, EDR configuration, Attack Surface Reduction rules, and related Intune-based policy deployment guidance.
- Investigate MDE onboarding, policy deployment behavior, endpoint configuration issues, AV exclusion or ASR rule concerns, and deviations from signed-off Defender design or build guidance.
- Review configuration evidence, screenshots, logs, connector status, device policy status, and troubleshooting inputs shared by client IT teams.
- Support go-live and Hypercare troubleshooting discussions for MDE policy deployment through Intune and endpoint security transition activities.
- Coordinate with endpoint, Intune, identity, SOC, and security teams to validate root cause, confirm remediation guidance, and track closure.
- Escalate unresolved or complex technical issues to L3 engineers, SMEs, or architects where deeper design or platform guidance is required.
- Maintain issue tracker updates, action notes, closure inputs, and clear support documentation during Hypercare and warranty phases.
Required technical skills:
- Experience in endpoint security support, Microsoft Defender for Endpoint operations, MDE onboarding support, or enterprise Microsoft security support.
- Hands-on understanding of Microsoft Defender for Endpoint, Defender Antivirus, EDR configuration, Attack Surface Reduction rules, and Intune policy deployment.
- Ability to investigate device policy status, configuration evidence, endpoint deployment issues, AV exclusions, ASR behavior, and operational exceptions.
- Familiarity with Entra ID Conditional Access, SOC integration touchpoints, Sentinel or Splunk inputs, and enterprise support governance.
- Good understanding of issue logging, technical triage, escalation, closure tracking, and evidence-based troubleshooting.
Requirements:
- Able to engage directly with client IT and security stakeholders, explain investigation findings clearly, and coordinate remediation guidance.
- Strong ownership mindset, structured troubleshooting approach, accurate documentation habits, and ability to manage L2 issues through closure or escalation.
Qualifications:
- Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field is preferred.
- Desirable Microsoft certifications include SC-200, MD-102, SC-900, SC-100, AZ-500, SC-300.
Preferred experience:
- Experience supporting Microsoft Defender for Endpoint in large enterprise endpoint security environments.
- Exposure to endpoint security migration, Defender Antivirus transition, MDE onboarding, and Intune-based Defender policy deployment.
- Experience supporting go-live, Hypercare, warranty support, and post-implementation stabilization activities.
- Exposure to regulated enterprise environments is advantageous.
- Experience working in client-facing support or delivery support environments is beneficial.
About you:
- You bring mature L2 MDE support capability, structured troubleshooting, and stakeholder confidence.
- You are evidence-driven, collaborative, practical, and comfortable escalating complex issues.
