Endpoint Security Operations Engineer (L2) – Microsoft Defender
Core
L2 Endpoint Security Operations Engineer supporting enterprise-wide endpoint protection and Microsoft Defender security operations.
Role type
L2 security operations engineer (endpoint protection)
Builds
Incident containment, threat remediation, and endpoint security compliance for enterprise environments
Domain
Cybersecurity / Endpoint Security
Deliverable
client delivery
Required skills
Microsoft Defender for Endpoint, threat investigation, malware analysis, incident response, Windows administration, PowerShell, ServiceNow, security policy management, device compliance monitoring
Preferred skills
Microsoft SC-200 certification, Microsoft Defender XDR, Microsoft Sentinel, KQL, threat hunting, PowerShell scripting automation
Technologies
Microsoft Defender for Endpoint, Microsoft Defender XDR, Microsoft Sentinel, ServiceNow, PowerShell
Responsibilities
Investigate endpoint detection alerts and security incidents; troubleshoot Defender sensor health and policy application; support threat containment and remediation; monitor endpoint protection coverage and compliance gaps; coordinate follow-the-sun handovers across global teams; maintain investigation records and runbooks
Seniority
Mid-level (3–6 years experience), hands-on IC
