Job Title: Microsoft Defender Engineer
Location: Chennai
Experience: 4–8 Years
Employment Type: Full-Time
Notice Period: Immediate Joiners or Up to 15 Days
About the Role
We are looking for a skilled Microsoft Defender Engineer with hands-on experience in deploying, managing, and optimizing the Microsoft Defender security suite. The ideal candidate will be responsible for strengthening endpoint security, identity protection, cloud application security, and incident response across enterprise environments.
Key Responsibilities
-
Deploy, configure, and manage Microsoft Defender security solutions across enterprise environments.
-
Administer and maintain Microsoft Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps, and Microsoft Defender XDR.
-
Monitor security alerts, investigate incidents, and perform threat hunting activities.
-
Analyze security events and respond to malware, ransomware, phishing, and advanced cyber threats.
-
Configure attack surface reduction (ASR) rules, endpoint detection and response (EDR), and antivirus policies.
-
Develop and fine-tune security policies, detection rules, and automated response workflows.
-
Integrate Microsoft Defender with Microsoft Sentinel and other SIEM/SOAR platforms.
-
Perform endpoint onboarding, policy deployment, and security compliance assessments.
-
Conduct vulnerability management using Microsoft Defender Vulnerability Management.
-
Collaborate with infrastructure, cloud, and security teams to improve the organization's security posture.
-
Prepare security reports, dashboards, and incident documentation.
-
Participate in security audits, compliance initiatives, and vulnerability remediation activities.
-
Stay updated on the latest Microsoft security features, threat intelligence, and cybersecurity trends.
Technical Skills
Mandatory Skills
-
Microsoft Defender for Endpoint (MDE)
-
Microsoft Defender XDR
-
Microsoft Defender for Office 365
-
Microsoft Defender for Identity
-
Microsoft Defender for Cloud Apps (MCAS)
-
Microsoft Entra ID (Azure AD) Security
-
Microsoft Intune
-
Endpoint Detection & Response (EDR)
-
Threat Hunting & Incident Response
-
Attack Surface Reduction (ASR)
-
Microsoft Sentinel
-
Microsoft 365 Security Center
-
Windows Security & Endpoint Hardening
-
PowerShell Scripting
-
Security Baselines & Compliance Policies
Good to Have
-
Microsoft Defender for Cloud
-
Azure Security Center
-
Microsoft Purview
-
Microsoft Intune Endpoint Security
-
Microsoft Security Copilot
-
SIEM/SOAR integration experience
-
Knowledge of Zero Trust Architecture
-
Experience with MITRE ATT&CK Framework
-
Knowledge of CIS Benchmarks and NIST Security Framework
Required Qualifications
-
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
-
4–8 years of experience in Microsoft Security technologies.
-
Strong experience in Microsoft Defender deployment and administration.
-
Experience with Microsoft 365 Security, Azure Security, and Endpoint Security.
-
Hands-on experience in incident investigation, malware analysis, and threat detection.
-
Good understanding of Windows Server, Active Directory, DNS, networking, and identity management.
-
Strong troubleshooting, analytical, and problem-solving skills.
-
Excellent communication and documentation skills.
Preferred Certifications
-
Microsoft Certified: Security Operations Analyst Associate (SC-200)
-
Microsoft Certified: Identity and Access Administrator Associate (SC-300)
-
Microsoft Certified: Information Protection Administrator Associate (SC-400)
-
Microsoft Certified: Cybersecurity Architect Expert (SC-100)
-
Microsoft Certified: Azure Security Engineer Associate (AZ-500)
-
Microsoft 365 Certified: Endpoint Administrator Associate (MD-102)
Soft Skills
-
Strong analytical and investigative skills.
-
Excellent verbal and written communication.
-
Ability to work independently and in a collaborative team environment.
-
Strong incident management and troubleshooting capabilities.
-
Willingness to work in rotational shifts or provide on-call support when required.
