Microsoft Defender Administrator

Job DetailsThis position is full time remote and requires the candidate hold an active secret clearance. Are you detail-oriented and passionate about cybersecurity? We’re searching for a Microsoft Defender Operator to join our dynamic team and ensure the smooth, day-to-day operation of our Microsoft Defender services for our Department of Defense (DOD) customer. If you’re committed to maintaining high security standards and eager to contribute to a critical mission, this could be the perfect opportunity for you! Responsibilities: 1.    Monitoring Endpoint Detection and Response (EDR): •    Continuously monitor EDR solutions to detect and report threats to the Security Operations Center (SOC) in real-time. 2.    Managing Next-Generation Antivirus (NGAV): •    Ensure NGAV solutions are running optimally and address any alerts or issues. •    Perform routine checks and updates to maintain peak performance. 3.    Maintaining Attack Surface Reduction: •    Ensure rules and controls are in place to minimize the attack surface of endpoints, as provided by the SOC •    Report any deviations or issues to the engineering team for review. 4.    Integrating Cloud-Delivered Protection: •    Verify that real-time updates and threat intelligence from the Microsoft cloud are being received and applied. •    Report any discrepancies or issues to the engineering team. 5.    Connecting with SIEM Solutions: •    Ensure seamless integration of Microsoft Defender with Microsoft Sentinel and other SIEM tools. •    Monitor and maintain centralized logging, analytics, and reporting dashboards. •    Perform data analysis via the SIEM tool as required. 6.    Ensuring Cross-Platform Protection: •    Verify comprehensive security across Windows, Linux, and mobile devices. •    Report any platform-specific issues to the engineering team. 7.    Delivering Comprehensive Reporting and Analytics: •    Generate and review detailed reports on security posture, incidents, and compliance. •    Ensure dashboards and alerts are functioning correctly and report any issues. 8.    Applying Prescribed Procedures: •    Follow established procedures and guidelines for maintaining Microsoft Defender solutions. •    Escalate any issues or anomalies to the engineering team. 9.    Implementing Windows Defender Application Control (WDAC): •    Ensure WDAC policies are correctly applied and functioning as intended. •    Report any policy violations or issues to the engineering team. 10.    Integrating Microsoft Defender, Intune, and Purview for Data Loss Prevention (DLP): •    Ensure DLP policies are correctly implemented and functioning across endpoints, mobile devices, and cloud services. •    Implement approved DLP waivers for authorized users and devices. •    Monitor DLP incidents and report any policy violations or data exfiltration attempts to the engineering team. •    Maintain unified reporting and alerts for any DLP-related issues.Qualifications•    A Bachelor’s degree in Computer Science, Information Security, or a related field. •    3+ Years of relevant experience •    Experience with Microsoft Defender for Endpoint, Cloud, and Servers. •    Familiarity with endpoint security, threat hunting, and incident response. •    Familiarity with SIEM solutions, especially Microsoft Sentinel. •    Excellent attention to detail and problem-solving skills. •    Good communication and collaboration skills to interact effectively with stakeholders at all levels. •    Understanding of industry compliance standards (e.g., NIST) and relevant regulations (e.g., GDPR, HIPAA) is advantageous. •    Willingness to stay updated with the latest cybersecurity trends and emerging security tools. •    Required DoD 8140 compliant certification such as CompTIA Security+ •    Secret Clearance  Desired Skills: •    Experience with ServiceNow or other ticketing system •    Experience administering and working with Windows and Linux operating systems •    Microsoft Active Directory/Entra •    Microsoft PowerBI Dashboarding •    Advanced PowerShell scripting or prior software development experience •    DoD PKI Accelera Solutions is an Equal Opportunity Employer/Veterans/Disabled.