Defender XDR Security Engineer (L3)

VaporVM; Dubai; On-site; AED 300,000 - 540,000; Full time

Benefits offered by this job

Remote work opportunities

Job summary

VaporVM is seeking an experienced Microsoft Defender Security Engineer L3 to manage and optimize Microsoft Defender workloads across XDR, Defender for Endpoint, and related services in the Dubai area. The role emphasizes threat detection, incident investigation, and automation using KQL and PowerShell.

The ideal candidate will have hands-on administration across Defender platforms, live in the UAE, and collaborate with MSSP SOC to ensure proactive security and compliant operations.

Qualifications

• Bachelor's degree in Engineering or related discipline.
• 5–6 years of relevant cybersecurity experience with hands-on Defender workloads.
• Strong hands-on administration, configuration, monitoring, and investigation across Defender workloads.

Responsibilities

• Platform Administration: Onboard and maintain devices, servers, sensors, and integrations across Defender workloads.
• Security Configuration & Engineering: Implement and optimize security policies, endpoint protection, email security, and cloud controls.
• L3 Security Monitoring & Incident Response: Investigate escalated incidents, perform root cause analysis, and coordinate containment with MSSP SOC.
• Detection Engineering & KQL: Develop, maintain, and optimize KQL queries and detection rules.
• SIEM & SOAR Integration: Integrate Defender with SIEM/ SOAR platforms, manage log onboarding and playbooks.
• Automation & Security Copilot: Leverage Security Copilot for triage, investigation, and automated responses.
• Cross-functional Collaboration: Coordinate with multiple teams to address gaps and changes.
• Documentation & Reporting: Maintain playbooks, baselines, audit evidence, and monthly security reports.

Skills

Defender XDR

KQL

PowerShell

Threat hunting

Incident investigation

SIEM/SOAR integrations

Windows security

Entra ID/Active Directory

Education

Bachelor's degree in Engineering

Tools

IBM QRadar SIEM

Trend Micro Endpoint Security

SOAR platforms

Job description

VaporVM is seeking an experienced Microsoft Defender Security Engineer L3 to manage and optimize Microsoft Defender workloads across XDR, Defender for Endpoint, and related services in the Dubai area. The role emphasizes threat detection, incident investigation, and automation using KQL and PowerShell.

The ideal candidate will have hands-on administration across Defender platforms, live in the UAE, and collaborate with MSSP SOC to ensure proactive security and compliant operations.