MS Defender Attack Surface Reduction (ASR)

Job#: 3045923

Job Description:

Client: Top 5 Bank

Terms: 12-month Contract

Location: 5 Days within the month/Downtown

Hours: 9-5

Key Skills

Microsoft Defender for Endpoint expertise

Attack Surface Reduction rule implementation and optimization

Endpoint security strategy

Security policy design and governance

Threat prevention and control hardening

Stakeholder engagement

Program and project leadership

Risk assessment and prioritization

KQL, PowerShell or automation scripting

Metrics, reporting, and continuous improvement

Required Qualifications

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience.

7+ years of experience in cybersecurity, endpoint security, or security engineering roles.

3+ years of experience leading or managing security initiatives, programs, or technical workstreams.

Strong hands-on experience with Microsoft Defender for Endpoint and the broader Microsoft Defender stack.

Proven experience designing, implementing, and tuning Attack Surface Reduction rules in enterprise environments.

Strong understanding of:

• Endpoint threat vectors
• Malware and ransomware techniques
• Windows security controls
• Endpoint detection and prevention
• Security baselines and hardening standards
• Experience deploying security controls through Intune, Group Policy, or similar enterprise endpoint management tools.

Strong familiarity with Windows enterprise environments, including:

• Windows 10/11 and Windows Server Environments
• Active Directory / Entra ID
• Endpoint policy management
• Administrative templates
• PowerShell scripting
• Experience balancing security requirements with operational needs in large, complex environments.

Strong written and verbal communication skills, with the ability to translate technical concepts into business-friendly recommendations.

Nice to haves

• Assessment of current endpoint security posture
• Identification of high-value ASR opportunities
• Pilot planning, rule tuning, and phased rollout
• Production deployment and post-implementation monitoring
• Exception governance and continuous optimization
• Develop and maintain enterprise standards for endpoint hardening, threat prevention, and security configuration management.
• Lead risk-based decision-making for ASR deployment modes, including audit, warn, and block, balancing security outcomes with operational impact.
• Create governance processes for security control exceptions, change management, documentation, and executive reporting.
• Support incident response and post-incident reviews by identifying opportunities to improve preventive controls through Microsoft Defender and ASR capabilities.
• Stay current on Microsoft security product updates, emerging attack techniques, and industry best practices to continuously evolve the control environment.

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

Everforth Apex Benefits Overview: In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA.

Employee Type:

Contract

Location:

Toronto, ON, CA

Job Type:

Date Posted:

August 18, 2026

Pay Range:

$55 - $65 per hour

Similar Jobs

• Cloud Security Engineer
• MS Exchange Engineer
• Deployed Support Specialist Mid - Gulfport MS
• Cybersecurity Technical Project Manager
• Master Level Cyber Defense Analyst/Intrusion Detection Team Shift Lead