Microsoft Defender for Endpoint (MDE) & Azure Security Engineer

Job Title - Microsoft Defender for Endpoint (MDE) & Azure Security Engineer

Location: Remote

We are seeking a skilled Microsoft Defender for Endpoint (MDE) & Azure Security Engineer to design, implement, administer, and optimize Microsoft's security solutions across endpoint, server, and cloud environments. The role will be responsible for endpoint protection, threat detection and response, Windows Defender Application Control (WDAC) policy management, Microsoft Defender for Servers, and Azure cloud security governance to ensure a secure, compliant, and resilient infrastructure.

Key Responsibilities

Microsoft Defender for Endpoint (MDE)

• Deploy, configure, and manage Microsoft Defender for Endpoint across enterprise endpoints.

• Monitor, investigate, and respond to security alerts, incidents, and threats.

• Perform threat hunting, attack disruption, and endpoint remediation.

• Manage Attack Surface Reduction (ASR) rules and security baselines.

• Configure EDR policies and optimize endpoint security posture.

• Produce compliance, vulnerability, and security health reports.

Microsoft Defender for Servers

• Deploy and maintain Defender for Servers across Windows and Linux servers.

• Onboard and offboard servers into MDE.

• Monitor server vulnerabilities and implement remediation actions.

• Manage anti-malware, EDR, and server security policies.

• Conduct security hardening and compliance assessments.

• Collaborate with infrastructure teams on server patching and security improvements.

Windows Defender Application Control (WDAC)

• Design and implement WDAC policies.

• Manage application allowlisting and code integrity controls.

• Troubleshoot application execution and security policy enforcement issues.

• Test and deploy WDAC configurations across enterprise environments.

• Ensure compliance with security governance and endpoint protection standards.

Azure Cloud Security

• Administer Microsoft Defender for Cloud and related Azure security services.

• Implement cloud security posture management (CSPM).

• Monitor Azure resources for security risks and compliance violations.

• Configure security policies, recommendations, and compliance controls.

• Secure Azure VMs, storage, networking, Kubernetes, and platform services.

• Manage cloud threat detection, vulnerability assessments, and remediation activities.

• Support Zero Trust and cloud governance initiatives.

Essential Skills

Technical Skills

Microsoft Security Stack

• Microsoft Defender for Endpoint (MDE)

• Microsoft Defender for Servers

• Microsoft Defender for Cloud

• Microsoft Defender XDR

• Microsoft Sentinel (preferred)

• Microsoft Intune / Endpoint Manager

• Defender Vulnerability Management

Endpoint Security

• Endpoint Detection & Response (EDR)

• Threat Hunting

• Attack Surface Reduction (ASR)

• Incident Response

• Malware Analysis

• Security Baselines

WDAC & Application Control

• Windows Defender Application Control (WDAC)

• Code Integrity Policies

• Application Allowlisting

• PowerShell-based policy deployment

• Windows Security Architecture

Azure Security

• Azure Security Center / Defender for Cloud

• Azure IAM & RBAC

• Azure Policy

• Azure Monitor & Log Analytics

• Azure Network Security (NSG, Azure Firewall, WAF)

• Key Vault Security

• Zero Trust Architecture

Operating Systems

• Windows Server 2016/2019/2022

• Windows 10/11

• Linux (RHEL, Ubuntu, SUSE)

Automation & Scripting

• PowerShell

• Kusto Query Language (KQL)

• Azure CLI

• ARM/Bicep/Terraform (preferred)

Experience Requirements

• 5+ years in Cyber Security / Endpoint Security Administration.

• 3+ years managing Microsoft Defender technologies.

• Experience implementing WDAC policies in enterprise environments.

• Experience securing Azure workloads and cloud environments.

• Strong understanding of security operations, incident response, and threat management.

• Experience working in regulated and compliance-driven environments.

Desired Certifications

• Microsoft Certified: Security Operations Analyst (SC-200)

• Microsoft Certified: Security Engineer Associate (AZ-500)

• Microsoft Certified: Endpoint Administrator Associate (MD-102)

• Microsoft Certified: Identity and Access Administrator (SC-300)

• CISSP, CEH, or CompTIA Security+ (preferred)

Desired Soft Skills

• Strong analytical and troubleshooting abilities

• Excellent communication and stakeholder management skills

• Incident management and crisis response experience

• Documentation and reporting skills

• Ability to work independently and within global security teams