Microsoft Defender XDR and Purview Consultant /Senior Consultant

• Jobseeker Video Testimonials 
  
• Employee Glassdoor Reviews
  

We are an IT Solutions Integrator/Consulting Firm helping our clients hire the right professional for an exciting long-term project. Here are a few details.

We are seeking an experienced Microsoft Security professional for an urgent Contract-to-Hire opportunity. The ideal candidate will have 3–6 years of experience with strong hands-on expertise in Microsoft Defender EDR/XDR and Microsoft Purview.

·         Configure, administer, and optimize Microsoft Defender for Endpoint and Defender XDR.

·         Investigate security alerts, incidents, malware, and endpoint threats.

·         Perform threat hunting using KQL and develop custom detections.

·         Manage endpoint security policies, including EDR, antivirus, attack surface reduction, firewall, and device control.

·         Support vulnerability management and incident response activities.

·         Configure and manage Microsoft Purview DLP, sensitivity labels, retention, audit, and insider risk capabilities.

·         Develop security dashboards, runbooks, operating procedures, and client deliverables.

·         Collaborate with security operations, compliance, and client stakeholders.

·         3–6 years of experience in cybersecurity or security operations.

·         Hands-on experience with Microsoft Defender for Endpoint/EDR, Microsoft Defender XDR, and Microsoft Purview.

·         Strong KQL and advanced threat-hunting skills.

·         Experience with endpoint incident investigation and remediation.

·         Knowledge of DLP, data classification, sensitivity labels, and information protection.

·         Strong communication, documentation, and client-facing skills.

·         Immediate or short-notice availability preferred.

·         Experience with Microsoft Sentinel, Intune, Entra ID, Defender for Office 365, or Defender for Cloud Apps.

·         Relevant Microsoft certifications, such as SC-200, SC-400, SC-300, or SC-100.

·         Prior consulting or enterprise security delivery experience.