Job
Description
Experience: 12 to 18 Years Microsoft Defender Architecture Role: Primarily Involved in Microsoft Defender portfolio comprising of MS Defender for Endpoint (MDE), MS Defender for Identity (MDI), MS Defender for O365 (MDO) and Microsoft Defender for Cloud App (MCAS) architecture and design activities. Should have deep knowledge of Endpoint Detections, Active Directory/Azure Active Directory and Threat Intelligence concepts. To architect Microsoft Defender, the following skills are mandatory, Design of the service architecture for endpoint detection and response service using / utilizing Microsoft Defender Portfolio (Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Office 365, Microsoft Defender for Cloud Apps). Must have strong knowledge in Windows Server, Windows Client, Active Directory and, or Entra ID, group policies. Performing migration of legacy endpoint security technologies to Microsoft technology stack for all the endpoint security modules of a suite (Endpoint detection and response, Antivirus, DLP, Encryption, Identity) Must have working knowledge on MS Defender for Cloud (Security Center) and MS Admin Center. Must have device(s) onboarding and off-boarding experience. Should have good understanding on ITIL process in order to align the service delivery with the stakeholders based on agreed SLA. Integration of EDR with Customers Incident Response processes. Performing Threat Hunting and EDR assessments. Developing EDR strategic advisory and roadmap to Customers. Developing sound working relationships with Sr. Executives of Client information security teams Building and sharing knowledge assets through executed engagements, industry connects, research and development. Supporting marketing initiatives as a speaker, presenter in events, etc. Supporting Sales related activities such as Proof-of-Concept, proposal presentations, Due-Diligence, solution campaigns, etc. Defining maturity model and conducting maturity assessments. Strong Threat hunting and detection knowledge and analysis of threats and alerts. Having working knowledge of Defender for Identity. Preferred certifications in SC-100, SC-200, SC-300, AZ-500, MS – 500 etc
