Senior Cybersecurity (SOC L3) - Banking Project

Job Description:

• Provide Level 3 (L3) technical support for Microsoft Defender for Endpoint (MDE), handling complex endpoint security incidents, escalations, and technical issues.
• Manage and support endpoint onboarding, configuration, health checks, and troubleshooting to ensure optimal MDE performance and protection.
• Lead and support endpoint migration activities from third-party antivirus or Endpoint Detection and Response (EDR) solutions to Microsoft Defender for Endpoint.
• Configure, implement, and maintain MDE security policies, ensuring alignment with organizational security standards and endpoint protection requirements.
• Investigate and troubleshoot complex MDE-related issues, including sensor health, onboarding failures, detection issues, policy conflicts, and endpoint connectivity problems.
• Analyze endpoint security alerts, detection events, and telemetry to identify potential threats and support incident investigation and remediation.
• Support the optimization of EDR capabilities, endpoint protection configurations, and security policies to enhance threat detection and response effectiveness.
• Manage and troubleshoot integration-related issues involving Microsoft Defender for Endpoint, Microsoft Defender for Cloud Apps, and Microsoft Purview.
• Collaborate with global security, infrastructure, and engineering teams to resolve escalated technical issues and support enterprise endpoint security operations.
• Prepare technical documentation, troubleshooting guides, incident reports, and root cause analysis (RCA) for complex technical issues.
• Provide technical recommendations and continuous improvement initiatives to enhance endpoint security posture, operational efficiency, and service quality.

Requirements:

• Bachelor's degree (S1) in Information Technology, Cybersecurity, Computer Science, or a related field.
• Minimum of 5 years of experience in IT Infrastructure, Cybersecurity, Endpoint Security, or related technical support roles.
• Strong hands-on experience with Microsoft Defender for Endpoint (MDE), particularly in enterprise environments.
• Proven experience in endpoint onboarding, health checks, configuration, troubleshooting, and security policy implementation.
• Experience migrating endpoints from third-party antivirus or EDR solutions to Microsoft Defender for Endpoint.
• Strong working knowledge of Endpoint Detection and Response (EDR), Microsoft Defender Antivirus, Attack Surface Reduction (ASR), Device Control, and Web Protection.
• Ability to analyze complex endpoint security issues, perform root cause analysis, and validate the effectiveness of endpoint security controls.
• Experience handling L3 escalations and providing advanced technical troubleshooting for endpoint security solutions.
• amiliarity with Microsoft Defender for Cloud Apps and Microsoft Purview.
• Strong analytical, troubleshooting, problem-solving, and incident management skills.
• Good verbal and written communication skills in English, with the ability to discuss technical issues, troubleshooting findings, and solutions with global teams.

Mandatory Technical Skills:

• Microsoft Defender for Endpoint (MDE)
• Microsoft Defender for Cloud Apps
• Microsoft Purview