L2 Microsoft Defender for Endpoint (MDE) Support Engineer

Key Responsibilities

• Provide L2 support for Microsoft Defender for Endpoint, Defender Antivirus, EDR configuration, Attack Surface Reduction (ASR) rules, and Intune-based security policy deployment.
• Investigate MDE onboarding, endpoint configuration, policy deployment, AV exclusion, ASR rule, and security policy issues.
• Review logs, screenshots, configuration evidence, connector status, device policy status, and other troubleshooting inputs.
• Support go-live, Hypercare, and post-implementation stabilization activities.
• Coordinate with Endpoint, Intune, Identity, SOC, and Security teams to identify root causes and implement remediation.
• Escalate complex or unresolved issues to L3 engineers, SMEs, or architects.
• Maintain issue trackers, action notes, troubleshooting evidence, closure updates, and support documentation.

Required Skills

• 3+ years of experience in endpoint security support, Microsoft Defender for Endpoint operations, or enterprise Microsoft security environments.
• Hands-on experience with Microsoft Defender for Endpoint (MDE) and Defender Antivirus.
• Strong understanding of EDR configuration, Attack Surface Reduction (ASR) rules, and Microsoft Intune policy deployment.
• Experience troubleshooting MDE onboarding, device policy status, endpoint deployment issues, AV exclusions, and ASR behavior.
• Familiarity with Microsoft Entra ID Conditional Access and SOC integration.
• Exposure to Microsoft Sentinel or Splunk is advantageous.
• Strong incident investigation, technical triage, escalation, and closure-tracking skills.
• Good documentation and stakeholder management skills.

Preferred Experience

• Experience supporting MDE in large enterprise environments.
• Exposure to endpoint security migration and Defender Antivirus transition projects.
• Experience with MDE onboarding and Intune-based Defender policy deployment.
• Experience supporting go-live, Hypercare, warranty, and stabilization activities.
• Experience in client-facing technical support or delivery environments.
• Experience working in regulated enterprise environments is advantageous.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline is preferred.
• Relevant Microsoft certifications such as SC-200, MD-102, SC-900, SC-100, AZ-500, or SC-300 are desirable.

EA Number: 11C4879