Experteer Overview
In this role you will lead Defender XDR initiatives within EY’s CMS TDR team, architecting and delivering Defender-based security solutions. You will serve as the Defender SME for client engagements, guiding cloud and on-prem security practices and incident response. You’ll develop automated monitoring content and playbooks while advising customers on use cases to reach their security goals. You’ll work with cross-functional teams to optimize Defender capabilities and documentation, shaping EY’s cybersecurity service offerings.
Compensaciones / Ventajas
• Architect and implement Defender XDR solutions
• Serve as Defender SME for client engagements and daily operations
• Strengthen security across cloud environments using Defender and best practices
• Advise customers on Defender use cases and achieving end-state requirements
• Develop content for automated security event monitoring, alerts and incident response playbooks
• Create and maintain Defender configuration documentation, policies, procedures
• Maintain expertise in Defender-related technologies (Defender for Cloud, Defender for IoT) and Intune AV policies
• Identify performance optimization opportunities within Defender solutions and implement changes
• Produce documentation and runbooks for security monitoring and incident response
Responsabilidades
• Hands-on experience with Microsoft Defender and related technologies
• Ability to work independently and in fast-paced environments
• Expertise in Defender XDR use case management
• Documentation skills for configuration, policies, and incident response playbooks
• Expertise in Microsoft Intune for AV policy creation/deployment
• Knowledge of Azure and AWS cloud technologies
• Strong knowledge of Windows Server and Linux
• Scripting skills (Python, Bash, PowerShell)
• Extensive knowledge of security threats and security monitoring
• Experience in cyber incident response and security operations
• Bachelor in Engineering and strong English communication
• Azure certifications (SC-200, SC-100, SC-900, AZ-500) or equivalents
Requisitos principales
• education and coaching
• individual progression plan
• interdisciplinary environment
• support and feedback
• opportunities to develop new skills
• flexible work options