Endpoint Security Engineer - Microsoft Defender
Washington, DC
Job Id:
146146
Job Category:
Job Location:
Washington, DC
Security Clearance:
No Clearance
Business Unit:
Piper Companies
Division:
Piper Enterprise Solutions
Position Owner:
Ryan Lucas
Piper Companies is seeking an Endpoint Security Engineer - Microsoft Defender to join a security operations company providing a comprehensive suite of security operations solutions. This engineer will provide engineering, deployment, and operational support for Microsoft Defender for Endpoint within a Federal customer's cloud and hybrid environments. This role is Hybrid in Washington, DC.
Responsibilities of the Endpoint Security Engineer - Microsoft Defender include:
- Manage day-to-day operations and tuning of Microsoft Defender for Endpoint
- Support detection engineering, threat analytics, and device compliance policies
- Integrate Defender with Microsoft Sentinel and other security tooling
- Assist with patching, incident response, and endpoint hardening
- Develop SOPs and technical documentation
- Deployment of Defender for Endpoint agents to minimum threshold of Microsoft supported endpoint devices via Microsoft Intune or Active Directory (AD) Group Policy Objects (GPO)
- Identification of target endpoint machines, OS versions, and deployment method
- Creation of DfE deployment scripts, including uninstallation of legacy EDR and anti-virus solutions
- Creation of DfE support infrastructure to support mass deployment (i.e., storage accounts, authorization, etc.)
- Testing of DfE deployment scripts
- Deployment of DfE agents to identified endpoint machines to scoped minimum threshold (percentage) of device endpoints
- Verification of onboarding and reporting
- Validate proper configuration to align with best practices
Qualifications for the Endpoint Security Engineer - Microsoft Defender include:
- 4+ Years of total Security Engineering experience
- 3+ years of experience with Defender for Endpoint in Microsoft GCC/GCC-H environments
- Strong understanding of EDR, device compliance, and threat analytics
- Experience with MDE integration into broader SIEM/SOAR platforms (e.g., Sentinel)
- Scripting or automation experience (PowerShell preferred)
- Strong documentation and incident reporting skills
Compensation for the Endpoint Security Engineer - Microsoft Defender includes:
- Salary: $140,000 - $165,000
- 401(k), including an employer match of 100% of the first 3% contributed and 50% of the next 2% contributed , Medical, Dental, and Vision Insurance (available on the 1st day of the month following your first day of employment) , Group Term Life, Short-Term Disability, Long-Term Disability , Voluntary Life, Hospital Indemnity, Accident, and/or Critical Illness, Participation in the Discretionary Time Off (DTO) Program,11 Paid Holidays Annually
Keywords: #LI-RL1 #LI-Remote
SIEM, SOAR, XSOAR, Detection, Automation, scripting, ingestion, rules, alerts, IR, security automation orchestration and response, Defender, Sentinel one, Splunk, Migrate, Migration, implement, implementation, logs, rules, alerts, query, dashboards, Endpoint, EDR, Defender, DFe,