全职 Microsoft Defender for Endpoint Administrator 工作, 薪水, RiDiK (a Subsidiary Of CLPS. Nasdaq: CLPS) Federal Territory 公司招聘中 - Ricebowl

Job Title: Microsoft Defender for Endpoint Administrator

Job Summary

We are seeking an experienced Microsoft Defender for Endpoint Administrator to manage and enhance enterprise endpoint security. The role involves endpoint protection, threat detection, incident response, vulnerability management, security policy administration, and integration with Microsoft security solutions to ensure a secure and compliant IT environment.

Key Responsibilities

• Administer Microsoft Defender for Endpoint (MDE) across enterprise workstations, servers, and virtual environments.
• Configure endpoint security policies, Microsoft Defender Antivirus, Attack Surface Reduction (ASR) rules, device control, and web protection.
• Manage endpoint onboarding, offboarding, health monitoring, and security compliance.
• Investigate security alerts, malware infections, and suspicious activities using Microsoft Defender XDR.
• Support threat hunting, incident response, root cause analysis, and remediation in coordination with SOC teams.
• Identify vulnerabilities using Microsoft Defender Vulnerability Management and coordinate remediation activities.
• Integrate and support Microsoft Sentinel, Microsoft Intune, Microsoft Entra ID, and other Microsoft Defender security solutions.
• Develop automation scripts using PowerShell and support API-based security integrations.
• Prepare security dashboards, incident reports, vulnerability reports, and compliance documentation.
• Provide L2/L3 technical support and participate in security projects, change management, and major incident resolution.

Required Skills & Experience

• 7–8 years of experience in endpoint security administration or cybersecurity operations.
• Minimum 5 years of hands-on experience with Microsoft Defender for Endpoint in enterprise environments.
• Strong knowledge of Microsoft Defender XDR, Microsoft Intune, and Endpoint Manager.
• Working knowledge of Microsoft Sentinel, SIEM, EDR, threat hunting, and incident response.
• Experience in vulnerability management, endpoint hardening, and Zero Trust security principles.
• Proficiency in PowerShell scripting; knowledge of REST APIs is an advantage.
• Familiarity with Windows 10/11, Windows Server 2016/2019/2022, and basic Linux endpoint security.
• Understanding of the MITRE ATT&CK framework and SOC processes.
• Experience supporting 1,000+ endpoints is preferred.

Education & Certifications

• Bachelor's degree in IT, Computer Science, Cybersecurity, or a related discipline.
• Preferred certifications: SC-200, SC-300, SC-900, or AZ-500.

Key Competencies

• Strong analytical and troubleshooting skills.
• Excellent incident investigation and problem-solving abilities.
• Effective communication and stakeholder management.
• Strong documentation and reporting skills.
• Ability to work collaboratively in an enterprise environment and participate in on-call support when required.