Microsoft Defender Xdr

Microsoft Defender Xdr Cybersecurity Jobs

3 jobs found

1mo ago

Senior Cybersecurity Engineer

Teleion Consulting Seattle, WA

Seattle, WA

1mo ago

$155k - $200k/yr Contract Senior Azure Ad / Entra Id Cloud Platforms

Apply Now

Job Description

Teleion Consulting is seeking a hands-on, client-facing Senior Cybersecurity Engineer to improve cloud security posture, strengthen incident response, and mature data security and zero trust across the Microsoft security ecosystem.

Responsibilities

Configure, tune, and operate the Microsoft security stack in production client environments, including Microsoft Sentinel, Defender XDR, Defender for Cloud, Entra ID, Intune, and Microsoft Purview.
Lead incident response for real security events, including account compromise, data exfiltration, insider risk, and BEC, covering containment, eradication, recovery, evidence preservation, and post-incident reporting.
Coordinate with MXDR or managed SOC providers to maintain escalation quality, handoff standards, and case closure practices.
Author and maintain KQL analytic rules and hunting queries in Microsoft Sentinel; map detections to MITRE ATT&CK, close coverage gaps, and tune for signal quality and ingestion cost.
Develop SOAR playbooks to reduce false positives and automate analyst workflows.
Design, deploy, and tune Microsoft Purview DLP policies across email, endpoint, SharePoint, OneDrive, Teams, and cloud apps, driving findings to closure.
Implement and maintain sensitivity labels, auto-labeling at scale, Insider Risk Management, and eDiscovery support.
Harden Azure and multi-cloud environments by remediating Defender for Cloud findings, improving secure score, and addressing cloud identity and entitlement risk.
Advance zero trust maturity across identity, device, network, application, and data pillars using Conditional Access, PIM, device compliance, and least-privilege access patterns.
Build PowerShell and Microsoft Graph API automations to scale security operations, reporting, and remediation.
Design and run tabletop exercises to test and mature the client incident response capability.

Requirements

7+ years of security engineering or security operations experience in enterprise environments.
Deep, production-configured hands-on experience across the full Microsoft security stack: Sentinel, Defender XDR, Defender for Cloud, Entra ID, Intune, and Microsoft Purview.
Demonstrated leadership handling real security incidents through the full lifecycle, including containment, eradication, recovery, and post-incident reporting.
Strong KQL proficiency: analytic rule creation, hunting query development, tuning for cost and signal quality, and mapping to MITRE ATT&CK.
Direct, demonstrable Microsoft Purview experience covering DLP policy design and tuning, sensitivity labels, Insider Risk Management, and eDiscovery.
Experience hardening Azure environments by remediating Defender for Cloud findings, improving secure score, and addressing cloud identity and entitlement risk.
Experience implementing zero trust controls across multiple pillars using Conditional Access and PIM and privileged access management.
PowerShell and Microsoft Graph API proficiency for security automation.
Experience coordinating with MXDR or managed SOC providers on escalation and case quality.
Certifications preferred: AZ-500, SC-200, SC-400, SC-100, GCIH, GCFA, or CISSP. Digital forensics experience in cloud and M365 environments is a plus.

Technologies

Microsoft Sentinel
Defender XDR
Defender for Cloud
Entra ID
Intune
Microsoft Purview
KQL
MITRE ATT&CK
SOAR
Microsoft Graph API
PowerShell
Conditional Access
PIM
Insider Risk Management
eDiscovery
DLP
SharePoint
OneDrive
Teams
Azure
Microsoft security ecosystem
MXDR
Managed SOC providers
Sensitivity labels
Device compliance
Least-privilege access patterns
Tabletop exercises

Job Details

Location: Seattle, WA (onsite)
Compensation: USD 155,000 - 200,000 per year
Employment type: contract

Benefits

Full benefits
PTO
Holiday
401(k)

View full job page →

1mo ago

Cybersecurity Engineer

LevelBlue LLC United States

United States

1mo ago Closed

$85k - $120k/yr Full time Azure Conditional Access Azure Security Azure Security Posture Management

This position is no longer accepting applications (closed Oct 18, 2026).

Job Description

This Senior Cybersecurity Engineering Consultant position at LevelBlue LLC focuses on delivering and uplifting Microsoft security programs for clients across the United States (onsite). You will lead Microsoft Purview engagements, harden Microsoft Defender XDR and Entra ID security in real client tenants, and produce client-ready artifacts that support execution and operational handover.

Key Responsibilities

Lead Purview engagements including current-state assessment, target design, phased rollout, and configuration of scoped capabilities such as information protection, DLP, audit, and related controls.
Implement and harden Microsoft Defender XDR and Entra ID security, including Conditional Access and identity-protection patterns, aligned to the client’s operating model rather than a demo tenant.
Deliver Azure security posture assessments and guided hardening covering landing-zone and control-plane hygiene, Defender for Cloud, and a prioritized remediation roadmap.
Where in scope, perform assessment-level Active Directory and hybrid identity work such as privilege exposure, delegation considerations, legacy protocol exposure, and provide a prioritized hardening roadmap.
Produce client-ready artifacts including gap analyses, configuration baselines, implementation plans, and an operational handover that can be executed.
Run workshops with security, compliance, identity, and IT stakeholders to capture requirements, decisions, risks, and scope changes.
Support pre-sales by providing effort estimates, defining technical scope, and shaping solutions.

Required Qualifications

Senior consulting or professional-services delivery, including workshops, scope development, and producing artifacts accepted by the client.
Hands-on Microsoft Purview implementation in a production or client tenant, with experience designing and configuring controls.
Hands-on Microsoft Defender XDR, including at least Defender for Endpoint plus one of Identity, Office, or Cloud Apps.
Hands-on Entra ID security, including Conditional Access, identity protection or risk patterns, and privileged-access basics as implemented in the tenant.
Ability to assess requirements, recommend a target configuration, and provide practical how-to guidance, including what to phase in and what not to enable.

Technology Focus

Microsoft Purview
Microsoft Defender XDR
Defender for Endpoint
Entra ID
Conditional Access
Identity protection / risk patterns
Microsoft Defender for Cloud
Azure security posture assessments
Active Directory
Microsoft Sentinel
AWS

Strongly Preferred

Active Directory security assessments in hybrid estates, covering privilege, stale admin paths, legacy authentication, and a hardening roadmap.
Azure security assessments and control implementation, including Defender for Cloud.
Microsoft Sentinel enablement for Purview, Defender, and Entra telemetry, including connectors, data usefulness, and detections.

Useful Experience

AWS or multi-cloud posture reviews.
Network-edge reviews on occasion, such as firewall or VPN policy, logging, and segmentation.

Certifications (Desirable)

Most relevant: SC-400; SC-300; SC-200
Also useful: SC-500 (AZ-500); SC-100; CISSP or CISM

Location and Compensation

Location: United States (onsite)

Salary: USD 85,000 - 120,000 per year

View full job page →

1mo ago

Security Engineer

MANATT, PHELPS & PHILLIPS LLP New York, NY

New York, NY

1mo ago Closed

$80k - $100k/yr Full time Cybersecurity Tools Edr Mdr Endpoint Security

This position is no longer accepting applications (closed Sep 29, 2026).

Job Description

Manatt, Phelps & Phillips LLP is seeking a Security Engineer to support and strengthen the firm’s Information Technology security operations. This hybrid role in New York, NY focuses on maintaining security controls, aiding incident response, and helping teams adopt secure practices across the organization.

Reporting into the firm’s security operations, you will help establish and enforce security policies while operating and improving the tools that protect the enterprise environment.

Responsibilities

Establish, monitor, and enforce security policies, procedures, and controls across the firm’s Information Technology environment.
Implement, administer, and maintain security infrastructure and tools, including endpoint protection, detection and response platforms, vulnerability management solutions, and related security controls.
Investigate security alerts, determine root cause, and coordinate timely remediation with appropriate stakeholders.
Monitor security risk trends and recommend updates to policies, practices, and tools to address evolving threats.
Coordinate additional protective measures, including targeted system scans and follow-up remediation as needed.
Partner with IT and business teams to provide practical security guidance and support secure technology use.
Support security awareness initiatives, including employee orientation, training, and ongoing guidance.
Maintain critical access information and related security records in accordance with firm procedures.
Perform other duties as assigned.

Requirements

5+ years of Information Technology security experience in a Microsoft Windows and enterprise environment.
Hands-on experience with CrowdStrike Falcon, including endpoint monitoring, threat detection, incident investigation, and response.
Experience implementing, administering, or monitoring Endpoint Detection and Response (EDR) and Managed Detection and Response (MDR) solutions.
Working knowledge of security monitoring, threat hunting, vulnerability management, and incident response best practices.
Minimum of 2 years of network security experience.
Strong written and verbal communication skills, with the ability to explain security concepts clearly to technical and non-technical audiences.
Strong organizational skills, attention to detail, and ability to manage competing priorities.
Ability to work independently with limited supervision while contributing effectively in a collaborative team environment.
Reliability and flexibility to work in a hybrid remote and in-office environment as business needs require.
Proficiency with Microsoft Office.
Hands-on experience with Microsoft Security technologies, including Microsoft Defender XDR, Microsoft Defender for Endpoint, Microsoft Sentinel, Microsoft Entra ID, and Microsoft Purview preferred.
Bachelor’s degree in Information Systems, Cybersecurity, or a related field preferred.
CISSP, GIAC, Microsoft Security, or other relevant cybersecurity certifications are a plus.

Technology Stack

Microsoft Windows
CrowdStrike Falcon
Endpoint Detection and Response (EDR)
Managed Detection and Response (MDR)
Microsoft Defender XDR
Microsoft Defender for Endpoint
Microsoft Sentinel
Microsoft Entra ID
Microsoft Purview
Microsoft Office

Compensation and Location

Location: New York, NY (hybrid)
Salary: USD 80,000 - 100,000 per year
Experience: Minimum 5 years

Benefits

A full range of medical, financial and/or other benefits dependent on the position

View full job page →

Microsoft Defender Xdr Cybersecurity Jobs

Senior Cybersecurity Engineer

Cybersecurity Engineer

Security Engineer

Get Microsoft Defender Xdr Cybersecurity Jobs alerts