Microsoft Security Consultant - Jakarta - Global IT Solutions Company

PT Adecco Personnel Indonesia; Jakarta Utara; On-site; IDR 180,000,000 - 480,000,000; Full time

Job summary

Global Technology Company in Jakarta is seeking Security Consultants (L1-L3) to join a delivery team supporting Microsoft security and endpoint security transformation in a large enterprise environment.

The role covers L1/L2/L3 activities across onboarding, policy deployment, troubleshooting, and governance, with collaboration across Endpoint, Intune, Identity, SOC, Compliance, and IT Operations teams. Jakarta-based, hybrid or on-site options may be available.

Qualifications

• Bachelor's degree in IT, Cybersecurity, or related field preferred.
• Solid knowledge of Microsoft Defender for Endpoint and enterprise security.
• Experience with AV exclusions, ASR rules, and policy deployment

Responsibilities

• Provide technical support for Microsoft security and endpoint platforms.
• Lead L1/L2/L3 escalation and coordination with client IT teams.
• Document issues with evidence, logs, and deployment outputs.
• Assist go-live, Hypercare, warranty, and stabilization activities.
• Coordinate across Endpoint, Intune, Identity, SOC, Security, and Ops teams.
• Escalate complex issues to L3 engineers and architects.

Skills

Microsoft security

Defender for Endpoint

Intune policy

EDR

ASR rules

MDCA

Entra ID CA

ITSM processes

Ticket triage

Security leadership

Education

Bachelor's degree in IT / Cybersecurity

Tools

Microsoft Defender

Microsoft Sentinel

Splunk

Entra ID

Job description

Microsoft Security Consultant - Jakarta - Global IT Solutions Company

Role : MicrosoftSecurity Consultant

Level : L1 / L2 / L3

Company : Global Technology Company

Working Location : South Jakarta

About the Role

We are looking for Security Consultants at L1, L2, and L3 levels to join a delivery team supporting Microsoft security and endpoint security transformation in a large enterprise environment.

The team will support technologies including Microsoft Defender for Endpoint (MDE), Microsoft Defender for Cloud Apps (MDCA), Microsoft Purview, Defender Antivirus, EDR, Attack Surface Reduction (ASR), and Microsoft Intune.

The role will cover activities across L1 support and triage, L2 technical troubleshooting, and L3 technical leadership and escalation management, depending on the candidate's experience and level.

Key Responsibilities

• Provide technical support for Microsoft security and endpoint security platforms, including MDE, MDCA, Microsoft Purview, Defender Antivirus, EDR, ASR, and Intune-based security policies.
• Support endpoint security migration, onboarding, policy deployment, configuration, troubleshooting, and post-implementation stabilization.
• Perform issue intake, ticket triage, technical investigation, evidence collection, and issue lifecycle tracking.
• Review and analyze screenshots, logs, connector status, device policy status, configuration evidence, and deployment outputs to identify issues and validate findings.
• Support troubleshooting related to MDE onboarding, Intune policy deployment, Defender Antivirus, AV exclusions, ASR rules, MDCA connectors, data sources, and Purview policy behavior.
• Coordinate with Endpoint, Intune, Identity, SOC, Compliance, Security, and IT Operations teams to validate root cause, determine remediation, and track issue closure.
• Maintain accurate ticket updates, technical notes, issue summaries, action items, closure inputs, RAID updates, and handover documentation.
• Support go-live, Hypercare, warranty, and post-implementation stabilization activities.
• Escalate unresolved or complex technical issues to the appropriate L2/L3 engineers, SMEs, architects, or client IT teams.
• Ensure all support activities follow agreed runbooks, support procedures, signed-off design/build guidance, and enterprise rollout governance.

Level-Specific Responsibilities

L1 – Security Consultant

• Perform first-level issue intake, ticket review, categorization, user impact capture, and prioritization.
• Collect required screenshots, logs, connector status, policy status, and supporting evidence.
• Perform basic troubleshooting based on established runbooks and support procedures.
• Track issues, actions, updates, closure status, and handoffs.
• Coordinate escalation to L2/L3, SMEs, or client IT teams when deeper investigation is required.
• Maintain clear ticket notes, issue summaries, and daily status updates.

L2 – Security Consultant

• Perform deeper technical investigation for MDE onboarding, policy deployment, endpoint configuration, AV exclusions, ASR behavior, and operational exceptions.
• Analyze configuration evidence, logs, device policy status, and troubleshooting inputs.
• Support go-live and Hypercare troubleshooting for MDE and Intune policy deployment.
• Validate root cause and provide remediation guidance.
• Coordinate with relevant technical teams to drive issues through closure.
• Escalate complex or unresolved technical issues to L3 engineers, SMEs, or architects.

L3 – Security Consultant

• Provide technical leadership for Microsoft Defender for Endpoint and endpoint security migration activities.
• Lead complex troubleshooting, root cause validation, and remediation direction.
• Provide technical guidance to L1/L2 engineers during escalation scenarios.
• Guide Defender policy migration and configuration decisions aligned with the agreed MDE design and enterprise rollout approach.
• Review complex configuration evidence, logs, deployment outputs, and policy behavior.
• Lead technical discussions with client IT and security stakeholders.
• Manage complex escalations through implementation, go-live, Hypercare, warranty, and stabilization phases.
• Provide technical handover and support documentation where required.

Required Technical Skills

• Experience in Microsoft security, endpoint security, security platform support, or enterprise Microsoft environments.
• Working to strong hands‑on knowledge of Microsoft Defender for Endpoint (MDE).
• Experience with Defender Antivirus, EDR, Attack Surface Reduction (ASR), AV exclusions, and Intune‑based policy deployment.
• Familiarity with Microsoft Defender for Cloud Apps (MDCA) and Microsoft Purview is an advantage, particularly for L1 support.
• Familiarity with Entra ID Conditional Access and enterprise identity/security environments.
• Exposure to SOC integration, Microsoft Sentinel or Splunk is advantageous.
• Understanding of issue logging, ticket triage, evidence collection, technical troubleshooting, escalation management, and closure tracking.
• Experience working with ITSM processes, support queues, issue trackers, and structured escalation paths is beneficial.

Consulting & Delivery Skills

• Strong communication skills with the ability to engage with client IT and security stakeholders.
• Structured and evidence‑based troubleshooting approach.
• Strong ownership and accountability for issue resolution.
• Ability to coordinate effectively across Endpoint, Intune, Identity, SOC, Security, Compliance, and Operations teams.
• Comfortable working in go‑live, Hypercare, warranty, and post‑implementation support environments.
• Ability to elevate issues appropriately while keeping stakeholders informed.

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field is preferred.
• Desirable Microsoft certifications include: SC‑200, MD‑102, SC‑900, SC‑100, AZ‑500, SC‑300, SC‑401

Preferred Experience

• Experience supporting Microsoft Defender for Endpoint in large enterprise environments.
• Exposure to endpoint security migration, MDE onboarding, Defender Antivirus transition, and Intune‑based Defender policy deployment.
• Experience with AV exclusion review, ASR rule implementation, endpoint security policy migration, and troubleshooting.
• Experience supporting go‑live, Hypercare, warranty, technical handover, and post‑implementation stabilization.
• Experience working in regulated enterprise environments is advantageous.
• Client‑facing support or delivery experience is beneficial.
• Experience coordinating L1/L2 support teams is preferred for L3‑level candidates.

Ideal Candidate Profile

Candidates should be collaborative, evidence-driven, practical, and comfortable working in a fast‑moving enterprise security environment.

• L1: Strong in ticket intake, triage, evidence collection, documentation, and escalation.
• L2: Strong in technical investigation, troubleshooting, root cause analysis, and remediation guidance.
• L3: Strong in technical leadership, complex troubleshooting, escalation management, and guiding L1/L2 teams.