Senior Microsoft Defender for Endpoint Security Engineer

About the role

CLEEVEN, a European consulting company, is looking for a Senior Microsoft Defender for Endpoint (MDE) Security Engineer to strengthen endpoint security in a complex enterprise IT environment. The role covers optimizing Defender policies, investigating security events, resolving advanced technical issues and improving the effectiveness of Microsoft Defender across heterogeneous systems, while also supporting internal security teams and sharing best practices.

Key responsibilities

• Audit and optimize MDE configurations and Defender Antivirus policies, exclusions and protection settings, including Attack Surface Reduction (ASR) rules, across workstations, servers and specialized systems.
• Analyze alerts and events in Microsoft Defender XDR, investigate risks and false positives, and recommend corrective actions.
• Perform advanced investigations using Advanced Hunting and KQL, and provide Level 3 support for complex issues and P1 incidents, including root cause analysis.
• Document configurations and procedures, and train and guide internal security engineers.

Required profile

• Senior cybersecurity engineer with significant hands-on experience in endpoint security and Microsoft Defender.
• Proven ability to configure, troubleshoot and optimize EDR solutions in complex environments.
• Strong analytical skills, autonomous problem solving and excellent communication skills.

Required skills

• Advanced hands-on expertise in Microsoft Defender for Endpoint and Defender Antivirus.
• Attack Surface Reduction (ASR) configuration and tuning.
• EDR investigation, advanced troubleshooting and root cause analysis.
• Strong assets: Defender XDR, Advanced Hunting and KQL, Microsoft Intune and GPO, PowerShell scripting; experience across heterogeneous enterprise environments.