Senior Defender XDR Engineer (Microsoft Defender)

EY; Málaga; On-site; EUR 70,000 - 100,000; Full time

Job summary

EY is seeking a Senior Cybersecurity Engineer (Microsoft Defender) in Málaga to lead Defender XDR architecture and guidance for customers. The role focuses on deployment, incident response, and cloud security across Azure and AWS environments, with strong scripting and documentation responsibilities.

You will work both independently and within a team, delivering use cases, playbooks, and continuous improvement of Defender configurations while collaborating with EY cybersecurity professionals.

Qualifications

• Hands-on experience with Microsoft Defender and related technologies (e.g., Windows Defender, Microsoft Defender XDR, Defender for cloud, Defender for IoT).
• Ability to work independently and collaboratively in a fast-paced environment, with a strong commitment to customer service and teamwork.
• Expertise in use case management in Defender XDR
• Create and maintain documentation related to Microsoft Defender configuration, policies, procedures, and incident response playbooks.
• Expertise in Microsoft Intune for AV policy creation and deployment
• Knowledge in Cloud technologies such as Azure, AWS
• Strong technical knowledge in Windows Server/Linux
• Identify opportunities for performance optimization and efficiency improvements within Microsoft Defender solutions, and implement changes as needed
• Scripting knowledge (Python, Bash, PowerShell)
• Extensive knowledge of different security threats
• Good knowledge and experience in Security Monitoring
• Good knowledge and experience in Cyber Incident Response

Responsibilities

• Architecting and implementation of Defender XDR.
• Perform as the subject matter expert on Microsoft Defender for the customer, use the capabilities of the solution in the daily operational work for the end customer.
• Securing overall cloud environments by applying cybersecurity tools and best practices
• Advise customers on best practices and use cases on how to use this solution to achieve customer end state requirements.
• Content development which includes developing process for automated security event monitoring and alerting along with corresponding event response plans for systems

Skills

Defender XDR

Defender for cloud

Defender for IoT

Azure

AWS

Windows Server

Linux

Intune for AV policy

Python

PowerShell

Bash

Use case management

Incident response playbooks

Education

B.E. / B.Tech.

Tools

Azure

AWS

Intune

PowerShell

Python

Windows Server

Linux

Job description

EY is seeking a Senior Cybersecurity Engineer (Microsoft Defender) in Málaga to lead Defender XDR architecture and guidance for customers. The role focuses on deployment, incident response, and cloud security across Azure and AWS environments, with strong scripting and documentation responsibilities.

You will work both independently and within a team, delivering use cases, playbooks, and continuous improvement of Defender configurations while collaborating with EY cybersecurity professionals.