Endpoint Security Specialist – MDE Operations & Support

About the role

This hands‑on position is responsible for keeping Microsoft Defender for Endpoint (MDE) and Microsoft Defender Antivirus (MDAV) healthy across all supported endpoints and servers. You will administer the services, monitor their health, and resolve issues to ensure continuous protection.

Key responsibilities

• Run day‑to‑day administration and technical support for MDE and MDAV across all endpoints and servers.
• Raise and manage Microsoft support cases, lead technical bridge calls during P1/P2 incidents, and coordinate remediation within approved change windows.
• Build, administer and audit MDE policy groups, manage device‑group membership rules, and ensure correct policy assignment.
• Gather and analyse MDE Client Analyzer logs, troubleshoot sensor and agent issues, and perform onboarding/off‑boarding actions.
• Maintain operational procedures, knowledge articles and metrics, and contribute to root‑cause analysis and process improvement.

Required profile

• Minimum 5 years of experience in endpoint, infrastructure, network security or security operations support, with at least 2 years hands‑on MDE administration.
• Bachelor’s degree in Cybersecurity, Computer Science, IT or related field (or equivalent experience).
• Experience in enterprise‑scale, regulated environments (government, healthcare, etc.) preferred.

Required skills

• Microsoft Defender for Endpoint and Microsoft Defender Antivirus administration.
• MDE policy‑group management, dynamic/static device‑group rules, Attack Surface Reduction and exclusions.
• Use of MDE Client Analyzer, PowerShell/command‑line diagnostics, Windows client and Server administration.
• ITIL‑aligned incident, request, change, problem and knowledge management.
• Clear written and verbal communication, documentation and handover creation.