Defender XDR Trainer

Sanderson Recruitment Plc; Greater London; On-site; GBP 37,000 - 92,000; Part time

Job summary

Sanderson Recruitment Plc is seeking an experienced Defender XDR Trainer to design and deliver practical training for our internal security team in London. The role focuses on equipping the team to manage day-to-day alerts, investigate incidents, and make informed operational decisions.

The trainer will translate complex Defender XDR concepts into clear operational guidance, facilitate discussions, and share best-practice approaches for handling alerts and incidents.

Qualifications

• Strong hands on experience with Defender XDR.
• Experience in Security Operations, Incident Response or Detection & Response environments.
• Ability to explain technical concepts clearly to operational teams.
• Confidence delivering training and facilitating discussions.
• Commercial and practical understanding of security operations best practice.

Responsibilities

• Design and deliver practical Defender XDR training for the internal security team.
• Transfer knowledge to operational staff.
• Help the team manage day-to-day alerts and investigate incidents.
• Explain Defender portals and day-to-day operations.

Skills

Security Operations

Incident Response

Training & Facilitation

Clear Communication

Tools

Microsoft Defender XDR

Job description

Defender XDR Trainer

Rate - £200 - £500 Inside IR35
Duration - 2/3 days
Location - London

We are looking to engage an experienced Microsoft Defender XDR specialist to design and deliver practical operational training for an internal security team.

This is not necessarily a dedicated trainer position. We are open to speaking with experienced security practitioners who have significant hands on experience with Defender XDR and can confidently transfer their knowledge to others.

The objective is to build confidence and capability within the team, enabling them to manage day to day alerts, investigate incidents effectively and make informed decisions when handling potential security events.

Desired outcome:

The overarching goal is to provide the team with a solid understanding of the Defender portals and day to day operations.

Particular focus should be given to:

• Managing large volumes of alerts.
• Identifying and handling false positives efficiently.
• Understanding expected user behaviours and their impact on alerts.
• Escalating genuine security concerns appropriately.
• Developing confidence in responding to minor incidents independently.

The requirement is focused on equipping the internal team with the knowledge needed to handle routine alerts, investigate lower severity incidents and make informed operational decisions.

What we're looking for:

• Strong hands on experience with Microsoft Defender XDR.
• Experience working within Security Operations, Incident Response or Detection & Response environments.
• Ability to explain technical concepts clearly to operational teams.
• Confidence delivering training and facilitating discussions.
• Commercial and practical understanding of security operations best practice.

Reasonable Adjustments:

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.