Endpoint Security Operations Engineer (L2) – Microsoft Defender
Core
L2 System Administrator supporting Microsoft Defender security operations across enterprise endpoints and infrastructure.
Role type
L2 Security Operations Engineer (Endpoint)
Builds
Threat response, incident containment, and remediation for enterprise endpoints.
Domain
Cybersecurity / Endpoint Protection
Required skills
Microsoft Defender for Endpoint administration, security alert investigation, threat analysis, incident response, endpoint protection, Windows OS administration, PowerShell, ITSM tools, cross-team coordination
Preferred skills
Microsoft SC-200 certification, Microsoft Sentinel/KQL, threat hunting, Defender for Identity/Office 365, vulnerability management, PowerShell automation
Technologies
Microsoft Defender for Endpoint, Microsoft Sentinel, ServiceNow, PowerShell, Windows OS
Responsibilities
Investigate endpoint detection alerts and security incidents, troubleshoot Defender sensor health and policy issues, support threat containment and remediation, monitor security dashboards and compliance status, coordinate with L1/L3 teams and SOC, maintain incident documentation and runbooks
Seniority
Mid-level, hands-on IC