Security Analyst, L2 Support Engineer – MDE Endpoint (Contract)

Security Analyst L2 Support Engineer – Endpoint Security Migration

Duration: 3 months contract

Key Responsibilities

• Provide L2 support for Microsoft Defender for Endpoint onboarding, Defender Antivirus, EDR configuration, Attack Surface Reduction rules, and Intune endpoint security policies.
• Investigate device policy status, endpoint configuration gaps, AV exclusions, ASR behavior, onboarding issues, connector status, logs, screenshots, and other troubleshooting evidence.
• Support go-live and Hypercare discussions related to MDE deployment, policy rollout, endpoint security transition, and post-implementation stabilization.
• Coordinate with endpoint, Intune, identity, SOC, and security teams to validate root cause, confirm remediation steps, and drive issue closure.
• Escalate complex or unresolved issues to L3 engineers, SMEs, or architects where deeper platform or design input is required.
• Maintain clear issue trackers, action notes, closure records, and support documentation throughout Hypercare and warranty support.

Required Skills

• Hands-on experience with Microsoft Defender for Endpoint, Defender Antivirus, EDR, Attack Surface Reduction, and Intune policy deployment.
• Strong troubleshooting skills across endpoint security operations, policy behavior, deployment exceptions, and evidence-based technical triage.
• Familiarity with Entra ID Conditional Access, SOC integration touchpoints, Microsoft Sentinel or Splunk inputs, and enterprise support governance.
• Ability to communicate investigation findings clearly to IT and security stakeholders and manage L2 issues through closure or escalation.

Qualifications and Preferred Experience

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related discipline is preferred.
• Microsoft certifications such as SC-200, MD-102, SC-900, SC-100, AZ-500, or SC-300 are desirable.
• Experience in large enterprise endpoint security environments, Defender Antivirus transition, MDE onboarding, Intune-based Defender policy deployment, Hypercare, warranty support, or regulated environments is advantageous.