L2 Microsoft Defender for Endpoint (MDE) Support Engineer

Job Description

• We are seeking an experienced L2 Microsoft Defender for Endpoint (MDE) Support Engineer to support enterprise endpoint security migration initiatives.
• The ideal candidate will have strong expertise in Microsoft Defender for Endpoint, Defender Antivirus, Intune policy deployment, EDR configuration, and endpoint troubleshooting, with experience supporting go-live, Hypercare, and post-implementation activities.

Key Responsibilities

• Provide L2 support for endpoint security migration activities focused on Microsoft Defender for Endpoint (MDE), Defender Antivirus, EDR configuration, Attack Surface Reduction (ASR) rules, and Intune-based policy deployment.
• Investigate MDE onboarding, endpoint configuration issues, policy deployment failures, AV exclusions, ASR rule behavior, and operational exceptions.
• Review logs, configuration evidence, device policy status, connector health, and troubleshooting inputs to identify root causes.
• Support go-live, Hypercare, warranty, and post-implementation stabilization activities. Coordinate with endpoint, Intune, identity, SOC, and security teams to resolve technical issues.
• Escalate complex issues to L3 engineers or architects when required.
• Maintain issue tracking, documentation, remediation plans, and support records throughout the project lifecycle.
• Communicate technical findings and remediation recommendations to client stakeholders.

Required Skills & Experience

• Experience supporting Microsoft Defender for Endpoint (MDE) in enterprise environments.
• Strong knowledge of Microsoft Defender Antivirus, Endpoint Detection & Response (EDR), Attack Surface Reduction (ASR), and Intune policy deployment.
• Hands-on experience troubleshooting endpoint onboarding, device policy status, configuration issues, AV exclusions, and deployment failures.
• Familiarity with Microsoft Entra ID Conditional Access, Microsoft Sentinel, Splunk, and enterprise security operations.
• Strong understanding of incident management, issue triage, escalation, and technical documentation.
• Excellent analytical, troubleshooting, communication, and stakeholder management skills.

Preferred Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field.
• Microsoft certifications such as SC-200, MD-102, SC-900, SC-100, AZ-500, or SC-300 are highly preferred.
• Experience supporting enterprise endpoint security migrations and post-implementation Hypercare.
• Exposure to regulated enterprise environments is an advantage.

Key Technologies

• Microsoft Defender for Endpoint (MDE)
• Microsoft Defender Antivirus
• Endpoint Detection & Response (EDR)
• Microsoft Intune
• Attack Surface Reduction (ASR)
• Microsoft Entra ID
• Microsoft Sentinel
• Splunk
• Windows Endpoint Security