Microsoft Defender Administrator

Accelera Solutions

Microsoft Defender Operator ensuring day-to-day cybersecurity operations for Department of Defense. Monitoring EDR, managing antivirus, and maintaining security policies across various platforms.

Posted 7/23/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Endpoint Detection and Response (EDR) and Next-Generation Antivirus (NGAV) management, ensuring optimal security across diverse platforms. Proficient in integrating Microsoft Defender with SIEM solutions and maintaining compliance with industry standards.

Highest-signal resume keywords

Endpoint Detection And Response (EDR)Next-Generation Antivirus (NGAV)Microsoft Defender For EndpointSIEM Solutions (Microsoft Sentinel)CompTIA Security+

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat HuntingIncident ResponseData Loss Prevention (DLP)Windows Defender Application Control (WDAC)Attack Surface Reduction

Soft Skills

Attention To DetailProblem-SolvingCommunicationCollaboration

Tools & Technologies

Microsoft DefenderMicrosoft IntuneMicrosoft Purview

Certifications & Qualifications

DoD 8140 Compliant CertificationCompTIA Security+

Industry Keywords

NISTGDPRHIPAA

Tech Stack

Tools & technologies

CloudCyber SecurityLinux

About the role

Key responsibilities & impact

Monitoring Endpoint Detection and Response (EDR):
Continuously monitor EDR solutions to detect and report threats to the Security Operations Center (SOC) in real-time.
Managing Next-Generation Antivirus (NGAV):
Ensure NGAV solutions are running optimally and address any alerts or issues.
Perform routine checks and updates to maintain peak performance.
Maintaining Attack Surface Reduction:
Ensure rules and controls are in place to minimize the attack surface of endpoints, as provided by the SOC
Report any deviations or issues to the engineering team for review.
Integrating Cloud-Delivered Protection:
Verify that real-time updates and threat intelligence from the Microsoft cloud are being received and applied.
Report any discrepancies or issues to the engineering team.
Connecting with SIEM Solutions:
Ensure seamless integration of Microsoft Defender with Microsoft Sentinel and other SIEM tools.
Monitor and maintain centralized logging, analytics, and reporting dashboards.
Perform data analysis via the SIEM tool as required.
Ensuring Cross-Platform Protection:
Verify comprehensive security across Windows, Linux, and mobile devices.
Report any platform-specific issues to the engineering team.
Delivering Comprehensive Reporting and Analytics:
Generate and review detailed reports on security posture, incidents, and compliance.
Ensure dashboards and alerts are functioning correctly and report any issues.
Applying Prescribed Procedures:
Follow established procedures and guidelines for maintaining Microsoft Defender solutions.
Escalate any issues or anomalies to the engineering team.
Implementing Windows Defender Application Control (WDAC):
Ensure WDAC policies are correctly applied and functioning as intended.
Report any policy violations or issues to the engineering team.
Integrating Microsoft Defender, Intune, and Purview for Data Loss Prevention (DLP):
Ensure DLP policies are correctly implemented and functioning across endpoints, mobile devices, and cloud services.
Implement approved DLP waivers for authorized users and devices.
Monitor DLP incidents and report any policy violations or data exfiltration attempts to the engineering team.
Maintain unified reporting and alerts for any DLP-related issues.

Requirements

What you’ll need

A Bachelor’s degree in Computer Science, Information Security, or a related field.
3+ Years of relevant experience
Experience with Microsoft Defender for Endpoint, Cloud, and Servers.
Familiarity with endpoint security, threat hunting, and incident response.
Familiarity with SIEM solutions, especially Microsoft Sentinel.
Excellent attention to detail and problem-solving skills.
Good communication and collaboration skills to interact effectively with stakeholders at all levels.
Understanding of industry compliance standards (e.g., NIST) and relevant regulations (e.g., GDPR, HIPAA) is advantageous.
Willingness to stay updated with the latest cybersecurity trends and emerging security tools.
Required DoD 8140 compliant certification such as CompTIA Security+

Benefits

Comp & perks

Health insurance
401(k) matching
Flexible work hours
Paid time off
Remote work options