Microsoft Defender EndPoint (MDE) Administrator

Title: Microsoft Defender EndPoint (MDE)

Location: Remote Role

Start Date: ASAP

Clearance required: Secret or TS

Certification Required: IAT Level 2

Monitor and analyze security events and threats related to endpoints using Microsoft Defender for Endpoints

Identify security gaps and vulnerabilities in endpoints and develop mitigation measures

Collaborate with other teams to effectively assess, escalate and remediate security incidents

Continuously evolve endpoint security policies and procedures based on current threats and best practices

Ensure an endpoint security application (anti-virus/anti-malware) is deployed, kept current with patches/signature files and functioning at all times on Client-owned endpoint devices.

Identify high risk and out of compliance endpoint devices for remediation and use the Client's established ITSM ticketing system to document for remediation.

Assist in the configuration of recommended policies when it falls within the scope of services.

Create, manage, and monitor app configuration and protection policies

Work with Endpoint support team to create and monitor device compliance and configuration policies

Configure and monitor Windows Defender policies to ensure maximum protection against cyber threats

Monitor and analyze security alerts from various security tools, including anti-virus, intrusion detection/prevention systems, firewalls, and SIEM solutions

Investigate and respond to security incidents, including malware infections, phishing attacks, and other security threats to endpoints

Develop and implement endpoint security policies and procedures to ensure compliance with industry standards and regulations

Conduct regular vulnerability assessments to identify potential security weaknesses in endpoints

Collaborate with cross-functional teams to identify and mitigate security risks associated with new systems and applications.

Investigate and resolve Windows Defender-related security incidents

Stay up-to-date with the latest threats, vulnerabilities, and security best practices related to Microsoft Defender

Collaborate with other IT professionals to ensure that Microsoft Defender is properly integrated into the organization's broader security infrastructure

Must have Security+, active clearance, and willing to travel 2nd week of on-boarding to PSNY.