Endpoint Security Engineer - CGI

OpenTalent; Karnataka; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

OpenTalent in Karnataka, India seeks a skilled security engineer to manage and optimize Microsoft Defender for Endpoint, Defender XDR, and related security services. The role emphasizes policy deployment, threat hunting, incident response, and integration with Sentinel for automated workflows.

The candidate will work with MDVM, BitLocker through Intune, Entra ID recovery keys, and modern device management. Strong scripting and reporting skills are required, with a focus on improving security

Qualifications

• Experience deploying and maintaining endpoint security policies.
• Monitor endpoint health, compliance, and security posture.
• Manage antivirus, firewall, web protection, and ASR policies.

Responsibilities

• Manage and support Microsoft Defender for Endpoint (MDE) and Microsoft Defender XDR.
• Deploy, configure, and maintain endpoint security policies.
• Monitor endpoint health, compliance, and security posture.
• Manage antivirus, firewall, web protection, and ASR policies.
• Support endpoint onboarding and troubleshooting.
• Monitor and investigate security alerts.
• Perform threat hunting using Advanced Hunting and KQL.
• Respond to malware, ransomware, phishing, and endpoint security incidents.
• Conduct incident analysis, containment, and remediation.
• Perform root cause analysis and recommend security improvements.
• Deploy and manage BitLocker and BitLocker To Go policies through Intune.
• Manage recovery keys using Microsoft Entra ID.
• Monitor encryption compliance and reporting.
• Troubleshoot encryption and recovery issues.
• Integrate Defender XDR with Microsoft Sentinel.
• Automate security tasks using PowerShell and KQL.
• Support security orchestration and automated response workflows.
• Manage device configuration profiles and security baselines.
• Configure compliance policies and Conditional Access integration.
• Support Windows Autopilot and modern device management.
• Manage Windows Update Rings and Endpoint Security Profiles.
• Troubleshoot device enrollment and policy deployment issues.
• Manage Microsoft Defender Vulnerability Management (MDVM).
• Identify, assess, and prioritize security vulnerabilities.
• Track remediation of operating system, application, and software vulnerabilities.
• Monitor exposure scores and security recommendations.
• Generate vulnerability and remediation reports.
• Coordinate with IT teams to remediate critical findings.
• Monitor security posture and compliance status.
• Support security audits and compliance reviews.
• Prepare security dashboards and reports.
• Maintain documentation, SOPs, and technical runbooks

Skills

Microsoft Defender for Endpoint

Defender XDR

Intune

PowerShell

KQL

Threat hunting

Incident response

Vulnerability management

Windows Autopilot

MDVM

Conditional Access

Microsoft Sentinel

Tools

Microsoft Sentinel

Job description

• Manage and support Microsoft Defender for Endpoint (MDE) and Microsoft Defender XDR.
• Deploy, configure, and maintain endpoint security policies.
• Monitor endpoint health, compliance, and security posture.
• Manage antivirus, firewall, web protection, and ASR policies.
• Support endpoint onboarding and troubleshooting.
• Monitor and investigate security alerts.
• Perform threat hunting using Advanced Hunting and KQL.
• Respond to malware, ransomware, phishing, and endpoint security incidents.
• Conduct incident analysis, containment, and remediation.
• Perform root cause analysis and recommend security improvements.
• Deploy and manage BitLocker and BitLocker To Go policies through Intune.
• Manage recovery keys using Microsoft Entra ID.
• Monitor encryption compliance and reporting.
• Troubleshoot encryption and recovery issues.
• Integrate Defender XDR with Microsoft Sentinel.
• Automate security tasks using PowerShell and KQL.
• Support security orchestration and automated response workflows.
• Manage device configuration profiles and security baselines.
• Configure compliance policies and Conditional Access integration.
• Support Windows Autopilot and modern device management.
• Manage Windows Update Rings and Endpoint Security Profiles.
• Troubleshoot device enrollment and policy deployment issues.
• Manage Microsoft Defender Vulnerability Management (MDVM).
• Identify, assess, and prioritize security vulnerabilities.
• Track remediation of operating system, application, and software vulnerabilities.
• Monitor exposure scores and security recommendations.
• Generate vulnerability and remediation reports.
• Coordinate with IT teams to remediate critical findings.
• Monitor security posture and compliance status.
• Support security audits and compliance reviews.
• Prepare security dashboards and reports.
• Maintain documentation, SOPs, and technical runbooks