Microsoft Defender Engineer

This position is full time remote and requires the candidate hold an active secret clearance.

Are you a dedicated cybersecurity expert looking to take the next step in your career? We're searching for a Microsoft Defender Engineer to join our dynamic team and implement top-notch security solutions for our Department of Defense (DOD) customer. If you're passionate about cybersecurity and eager to contribute to a critical mission, this could be the perfect opportunity for you!

Responsibilities:

1. Implementing Endpoint Detection and Response (EDR):

• Deploy and fine-tune EDR solutions to monitor and respond to threats in real-time.

2. Configuring Next-Generation Antivirus (NGAV):

• Set up and configure NGAV to provide behavioral-based protection.
• Optimize and tailor NGAV configurations for peak performance.

3. Conducting Threat & Vulnerability Management:

• Perform continuous vulnerability assessments and provide remediation recommendations.
• Develop and execute strategies to mitigate endpoint vulnerabilities.

4. Managing Attack Surface Reduction:

• Implement and maintain rules and controls to minimize the attack surface of endpoints.
• Regularly review and update strategies to stay ahead of emerging threats.

5. Integrating Cloud-Delivered Protection:

• Ensure real-time updates and threat intelligence from the Microsoft cloud are integrated.
• Monitor and adjust cloud-delivered protection features for other services/applications hosted in Azure cloud.

6. Connecting with SIEM Solutions:

• Seamlessly connect Microsoft Defender with Microsoft Sentinel and other SIEM tools.
• Create centralized logging, analytics, and reporting dashboards.

7. Ensuring Cross-Platform Protection:

• Guarantee comprehensive security across Windows, Linux, and mobile devices.
• Manage and monitor security solutions on diverse platforms.

8. Delivering Comprehensive Reporting and Analytics:

• Create detailed reports on security posture, incidents, and compliance.
• Develop customizable dashboards and alerts to keep the security operations center informed.

9. Implementing Windows Defender Application Control (WDAC):

• Design, implement, and manage WDAC policies to control which applications can run on endpoints.
• Ensure WDAC configurations align with organizational security policies and compliance requirements.
• Monitor and update WDAC policies to adapt to changing threat landscapes and business needs.

10. Integrating Microsoft Defender, Intune, and Purview for Data Loss Prevention (DLP):

• Implement and manage DLP policies using Microsoft Defender for Endpoint.
• Ensure sensitive data on endpoints is monitored, classified, and protected against unauthorized access or exfiltration.
• Configure and enforce device compliance and app protection policies using Microsoft Intune.
• Ensure mobile devices meet security requirements before accessing corporate resources.
• Discover, classify, and protect sensitive data across the organization using Microsoft Purview.
• Create and enforce DLP policies in Microsoft 365 and other cloud services to ensure data compliance and security.
• Monitor and report on DLP incidents, providing detailed alerts and insights to the security team.
• Integrate Microsoft Defender, Intune, and Purview to create a robust, layered DLP strategy.
• Ensure a comprehensive view of DLP incidents across endpoints, mobile devices, and cloud services.
• Set up unified reporting and alerts for any policy violations or data exfiltration attempts.

11. Applying the System Engineering Lifecycle:

• Use knowledge of the System Engineering Lifecycle to design, implement, and maintain Microsoft Defender solutions and integrations.
• Ensure all security solutions align with organizational goals and compliance requirements.

Qualifications:

• A Bachelor's degree in Computer Science, Information Security, or a related field. A Master's degree is a plus!
• 8+ Years of relevant experience
• Experience with Microsoft Defender for Endpoint, Cloud, and Servers.
• Experience with endpoint security, threat hunting, and incident response.
• Familiarity with SIEM solutions, especially Microsoft Sentinel.
• Strong analytical and problem-solving skills to address complex security tooling challenges.
• Excellent communication and collaboration skills to interact effectively with stakeholders at all levels.
• Understanding of industry compliance standards (e.g., NIST) and relevant regulations (e.g., GDPR, HIPAA) is advantageous.
• Willingness to stay updated with the latest cybersecurity trends and emerging security tools.
• Required DoD 8140 compliant certification such as CompTIA Security+
• Secret Clearance

Desired Skills:

• Other relevant cybersecurity certifications like Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM), are a plus.
• ServiceNow integrated workflows/automation
• Experience administering and working with Linux operating systems, specifically Red Hat Enterprise Linux
• Microsoft Active Directory/Entra
• Microsoft Federation Services
• Microsoft PowerBI Dashboarding
• Advanced PowerShell scripting or prior software development experience
• DoD PKI

Accelera Solutions is an Equal Opportunity Employer/Veterans/Disabled.