Security Engineer (xdr and defender)

Job Description

Job Description

Overview

We are seeking a highly skilled Security Engineer to lead the deployment, configuration, and operational transition of Microsoft Defender XDR and its integrated security tools. This role will focus on implementing advanced threat protection, data loss prevention, and compliance monitoring across endpoint, cloud, and identity platforms. The candidate will work closely with cybersecurity, compliance, and audit teams to ensure readiness and resilience across the enterprise.

Key Responsibilities

Purview / Data Loss Prevention (DLP)

• Deploy and operationalize all Microsoft Purview DLP policies across endpoints, email, and cloud apps.
• Ensure full coverage and audit readiness to avoid compliance gaps and reduce manual oversight.
• Collaborate with governance teams to align DLP configurations with regulatory requirements and internal risk thresholds.

Defender for Endpoint

• Implement and validate all Attack Surface Reduction (ASR) rules based on the prioritized threat hunting list from the Federal Energy Regulatory Commission (FERC).
• Monitor and tune ASR policies to reduce false positives and enhance threat detection fidelity.
• Integrate Defender for Endpoint with Microsoft Sentinel for centralized alerting and incident response.

Defender for Cloud (Azure Compliance)

• Transition Azure compliance monitoring to Virtual Machine Telemetry (VMT)-based actions and dashboards.
• Configure and maintain Defender for Cloud policies for IaaS and PaaS workloads, ensuring alignment with FedRAMP and internal baselines.
• Leverage Azure Policy, Blueprints, and Secure Score to enforce governance and automate remediation.

Cross-Suite Integration

• Architect and maintain a unified Microsoft Defender XDR environment including Defender for Identity, Defender for Office 365, Defender for Cloud Apps, and Defender for Servers.
• Enable Microsoft Copilot for Security to assist SOC teams with AI-driven threat investigation and response.
• Document SOPs and train SOC personnel on operational handoff and feature usage.

Qualifications

• Proven experience with Microsoft Defender XDR suite and Microsoft Purview Compliance Suite.
• Familiarity with FERC threat models and federal cybersecurity frameworks.
• Strong understanding of Azure governance, Sentinel, and VMT telemetry.
• Experience with Agile methodologies and Azure Boards for work item tracking.
• Excellent communication and documentation skills.