Job Description: Endpoint Security Engineer - Microsoft Defender XDR Role overview

We're seeking an Endpoint Security Engineer to manage and improve a Microsoft Defender XDR workplace. This role spans platform administration, endpoint agent and policy management, troubleshooting, reporting, and product-release assessment. You'll also support migrations from McAfee and Symantec to Microsoft Defender, including validating migration progress and retiring legacy tools once their agents are no longer required.

Key responsibilities

- Manage the Microsoft Defender XDR platform: Administer tenant configuration, licensing, role-based access control (RBAC), device groups and tags, integrations, APIs, and tenant-level settings.
- Manage endpoint agents: Oversee Microsoft Defender for Endpoint (MDE) compliance, packages, prerequisites, deployments, upgrades, downgrades, uninstallations, and troubleshooting. Maintain operating procedures and deployment documentation.
- Support migration and legacy-tool retirement: Plan and execute migrations from McAfee and Symantec to Microsoft Defender where appropriate. Track agent migration and validation, resolve migration issues, and coordinate retirement of legacy tools after dependencies are cleared.
- Design and manage security policies: Configure, test, obtain approvals for, deploy, document, and maintain antivirus, EDR, attack surface reduction (ASR), network and web protection, Smart Screen, mobile threat defense, Microsoft Defender for Identity (MDI), and Microsoft Defender for Office 365 (MDO) policies.
- Manage response capabilities: Support Automated Investigation and Response (AIR) and Automatic Attack Disruption, including configuration, testing, ongoing review, and troubleshooting.
- Provide technical support: Investigate issues involving the platform, licensing, configuration, agents, policies, integrations, and APIs. Support SOC and incident response investigations and Detection Engineering activities.
- Report status and manage stakeholders: Produce agent, policy, update, and compliance reports,



as well as weekly, monthly, quarterly, and ad hoc status updates. Participate in stakeholder meetings and document decisions and actions.
- Track Microsoft releases and threats: Assess product, platform, agent, and policy updates for relevance to the tenant; recommend actions; and monitor zero-day threats and vulnerabilities for appropriate response.

Required qualifications
- Experience administering Microsoft Defender XDR and Microsoft Defender for Endpoint in an enterprise environment.
- Hands-on experience with endpoint security operations, including agent deployment, policy configuration, troubleshooting, and compliance reporting.
- Familiarity with endpoint security controls such as antivirus, EDR, ASR, network protection, and web protection.
- Experience supporting security operations, incident response, or Detection Engineering teams.
- Ability to document procedures, communicate technical issues clearly, and coordinate work across security, IT, and business stakeholders.
- Experience assessing security-product updates and managing changes in a controlled environment.

Preferred qualifications
- Experience with McAfee and/or Symantec endpoint security products.
- Experience migrating endpoints from McAfee or Symantec to Microsoft Defender and retiring legacy agents.
- Familiarity with Microsoft Defender for Identity, Microsoft Defender for Office 365, mobile threat defense, AIR, and Automatic Attack Disruption.
- Experience with Microsoft Defender APIs, integrations, and tenant-level access management.
- Relevant Microsoft or security-industry certifications.

Example measures of success
- Endpoint migration and legacy-agent retirement progress is measurable and documented.
- Agent health, policy deployment, and compliance reporting are accurate and timely.
- Security-policy changes are tested, approved, and implemented with clear documentation.
- Platform issues are resolved or escalated promptly, with effective coordination across teams.
- Relevant product releases and emerging threats are assessed and translated into practical recommendations.

📌 USI-CTS Endpoint Security Engineer — Microsoft Defender XDR 3 - 8 Yrs (India)
🏢 Objectwin Technology India
📍 India