Microsoft Defender

We're Hiring: Microsoft Defender XDR Lead SME

• Lead deployment and tuning of Microsoft Defender XDR across customer tenants
• Monitor and respond to incidents using Defender for Endpoint, Office 365, Identity, and Cloud Apps
• Conduct proactive threat hunting and investigations using Defender advanced hunting queries, incident graphs, and investigative tools to detect and respond to emerging threats
• Integrate Defender XDR with Microsoft Sentinel and Power Platform for automation and dashboards
• Coordinate threat response playbooks and alert triage SOPs
• Collaborate with compliance and identity teams to enforce Zero Trust principles
• Mentor and train Tier 1 and 2 analysts on Defender interfaces and threat analysis workflows
• Review logs, signals, and telemetry via Graph API and M365 Security Center
• Stay current on Microsoft Defender roadmap and emerging threats

Required Skills & Experience

• 3+ years' experience with Microsoft Defender XDR and Sentinel
• Familiarity with SOC processes, MITRE ATT&CK framework, and threat modelling
• Experience supporting Microsoft 365 Business Premium, E5, and Azure tenants
• Ability to manage multi-tenant environments with GDAP and Lighthouse
• PowerShell, KQL, and Graph API skills are a plus
• Relevant Certifications (preferred):
• Microsoft Certified: Security Operations Analyst Associate (

  SC-200

  )
• Microsoft Certified: Cybersecurity Architect Expert (

  SC-100

  )
• Microsoft Certified: Azure Security Engineer Associate (

  AZ-500

  )
• Microsoft Certified: Identity and Access Administrator Associate (

  SC-300

  )
• Microsoft Defender XDR Ninja or Black Belt Badge