Microsoft Defender Engineer in India at Jobgether

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a [Microsoft Defender Engineer] based in [India].

We are seeking a skilled cybersecurity professional to strengthen enterprise security operations through advanced Microsoft security solutions.
The role focuses on deploying, managing, and optimizing endpoint, identity, and cloud security capabilities.
You will play a key role in detecting threats, responding to incidents, and improving overall security resilience.
Working across security, infrastructure, and cloud teams, you will help implement proactive defense strategies.
The position offers the opportunity to work with modern security technologies and contribute to large-scale enterprise protection initiatives.
You will be part of a collaborative environment that values continuous learning, innovation, and operational excellence.

The Microsoft Defender Engineer will be responsible for enhancing security posture by managing Microsoft security platforms, investigating threats, and supporting enterprise security initiatives. Key responsibilities include:

• Deploy, configure, administer, and optimize Microsoft Defender security solutions across enterprise environments.
• Manage Microsoft Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps, and Microsoft Defender XDR.
• Monitor security alerts, investigate incidents, conduct threat hunting activities, and respond to cybersecurity events.
• Analyze malware, ransomware, phishing attempts, and advanced threats while supporting incident response processes.
• Configure and maintain endpoint security controls, including Attack Surface Reduction (ASR) rules, EDR policies, antivirus configurations, and compliance settings.
• Develop and refine security policies, detection rules, and automated response workflows.
• Integrate Microsoft Defender solutions with Microsoft Sentinel and other SIEM/SOAR platforms.
• Perform endpoint onboarding, security policy deployment, vulnerability assessments, and remediation activities.
• Support vulnerability management initiatives using Microsoft security tools.
• Collaborate with infrastructure, cloud, and security teams to improve security architecture and operational processes.
• Create security reports, dashboards, documentation, and compliance-related materials.
• Participate in security audits and stay updated on emerging threats, security trends, and Microsoft security capabilities.

The ideal candidate will have strong experience in Microsoft security technologies, endpoint protection, and enterprise cybersecurity operations, along with excellent analytical and communication skills. Required qualifications include:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.
• 4–8 years of hands-on experience working with Microsoft security technologies and enterprise security environments.
• Strong expertise in Microsoft Defender for Endpoint, Microsoft Defender XDR, Defender for Office 365, Defender for Identity, and Defender for Cloud Apps.
• Experience with Microsoft Entra ID (Azure AD) security, Microsoft Intune, Microsoft 365 security, and endpoint protection solutions.
• Practical experience with Endpoint Detection and Response (EDR), threat hunting, incident investigation, and security monitoring.
• Knowledge of Attack Surface Reduction (ASR), security baselines, compliance policies, and endpoint hardening.
• Experience integrating Microsoft Defender solutions with Microsoft Sentinel or other SIEM/SOAR platforms.
• Strong understanding of Windows security, Windows Server, Active Directory, DNS, networking, and identity management.
• Proficiency in PowerShell scripting and security automation practices.
• Familiarity with vulnerability management, Zero Trust architecture, MITRE ATT&CK Framework, CIS Benchmarks, and NIST security frameworks is preferred.
• Experience with Microsoft Defender for Cloud, Microsoft Purview, Azure security tools, and Security Copilot is a plus.
• Strong troubleshooting, analytical thinking, documentation, and problem-solving abilities.
• Ability to work independently, collaborate effectively with teams, and support rotational shifts or on-call requirements when needed.
• Relevant certifications such as SC-200, SC-300, SC-400, SC-100, AZ-500, or MD-102 are advantageous.

• Full-time opportunity with exposure to enterprise cybersecurity environments.
• Opportunity to work with leading Microsoft security technologies and modern threat protection solutions.
• Collaborative work environment with opportunities for continuous technical growth.
• Professional development opportunities through hands-on experience and security certifications.
• Competitive compensation package.
• Exposure to security operations, incident response, vulnerability management, and cloud security initiatives.