Role & responsibilities
Implement, configure, and maintain Microsoft Defender for Endpoint across Windows, macOS, and Linux endpoints, including onboarding, configuration baselines, and policy management.
Operate MDE features such as attack surface reduction (ASR), application control (e.g., AppLocker/WDAC policies), Controlled Folder Access, Exploit Protection, and EDR-managed remediation.
Run and manage the vulnerability management lifecycle for endpoints: scan scheduling, authenticated scanning, triage of findings, exploitability assessment, prioritization, SLA assignment, remediation coordination, verification, and reporting.
Deploy, configure, and manage Microsoft Intune (device enrolment, configuration profiles, compliance policies, device compliance reporting, app protection, conditional access posture) to ensure endpoint security posture and integration with Defender.
Collaborate closely with patch management, IT operations, application owners, and engineering teams to drive remediation, validate fixes, and close risk gaps.





Preferred candidate profile
Must Have team leading experience
5+ years Microsoft Defender for Endpoint or equivalent EDR platform (deployment, configuration, hunting, investigations, automated response).
5+ years practical experience in vulnerability management for endpoints (scanning, triage, prioritization, remediation coordination).
3+ years experience managing Microsoft Intune (device enrolment, configuration profiles, compliance policies, application protection, conditional access integration).
Advanced knowledge of Windows internals (processes, services, registry, event/log structures) and positive exposure to macOS and Linux endpoint artifacts.
Deep knowledge of endpoint & Solid analytical and problem-solving skills.
Understanding of remediation packages in Intune or SCCM & Windows OS
Scripting and automation knowledge - preferred PowerShell.

📌 Client Vulnerability Lead Bengaluru (India)
🏢 Michael Page
📍 India