Endpoint Security Operations Engineer (L2) – Microsoft Defender

About the role

We are looking for a skilled L2 System Administrator to support Microsoft Defender security operations across enterprise endpoints and infrastructure. The role is responsible for investigating security alerts, analyzing endpoint threats, troubleshooting defender agen t and policy issues, supporting incident containment and remediation, and maintaining security compliance.

What you'll do

• Provide L2 support for Microsoft Defender alerts, incidents and service requests
• Investigate endpoint detection alerts, malware detections, suspicious activities and security incidents using Microsoft Defender for Endpoint
• Analyze device timelines, alert evidence, process activity and investigation data to determine incident scope
• Troubleshoot Defender sensor health, onboarding, connectivity, policy application and reporting issues
• Support approved threat containment and remediation activities, including device isolation and threat remediation

What you need

• 3–6 yrs of experience
• Incident response
• Vulnerability assessment
• Compliance
• PowerShell
• Office 365
• ServiceNow
• Any graduate