Microsoft Defender XDR Support Engineer – L1/L2

Avensys Consulting; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Benefits offered by this job

Competitive benefits

24x7 work environment

Job summary

Avensys Consulting is hiring a Microsoft Defender XDR Support Engineer at L1/L2 to provide 24x7 security operations support in a 12-month renewable contract. You will monitor, triage and troubleshoot Defender for Endpoint, MDCA and Purview, while coordinating with SOC and IT teams to resolve issues and ensure service continuity.

The role requires hands-on knowledge of MDE, MDCA, Purview and Intune, plus strong problem-solving and communication skills to support enterprise environments.

Qualifications

• Bachelor's degree in IT, Cybersecurity, Computer Science or related field preferred.
• Minimum 5+ years of experience in cybersecurity, security operations, endpoint security, Microsoft 365 security or enterprise technology support.
• Hands-on experience with Microsoft Defender for Endpoint (MDE), Defender for Cloud Apps (MDCA) and Microsoft Purview.
• Good understanding of Microsoft Defender XDR and Microsoft Intune.
• Experience with security policy troubleshooting, including DLP, IRM, retention/DLM and endpoint policies.
• Strong troubleshooting, issue investigation, evidence analysis and problem-solving skills.
• Experience with L1/L2 support, incident/ticket management, escalation and hypercare/go-live support.
• Ability to work with cross-functional teams including SOC, Endpoint, Intune, Identity and Compliance.

Responsibilities

• Provide 24x7 support and hypercare for Microsoft Defender for Endpoint, MDCA, Defender XDR and Purview.
• Monitor, triage and investigate security-related issues across Microsoft security platforms.
• Review logs, screenshots, device/policy status, connector status and configuration evidence to identify issues and impact.
• Troubleshoot MDE policies, Intune deployments, MDCA connectors/policies and Purview capabilities including DLP, IRM and retention/DLM.
• Provide technical guidance and support for issue resolution, remediation and policy-related concerns.
• Coordinate with SOC, IT, Endpoint, Intune, Identity, Compliance and Operations teams to resolve issues.
• Escalate complex issues to L3 engineers, SMEs, Microsoft Support or platform owners.
• Maintain accurate ticket updates, issue trackers, investigation notes, resolution summaries and status reports.
• Support go-live, hypercare and post-production activities following approved processes and security standards.
• Communicate effectively with client stakeholders and ensure timely resolution and closure of issues.

Skills

MDE

MDCA

Purview

Intune

Security operations

Incident management

24x7 support

Education

Bachelor's degree in IT or Cybersecurity

Tools

Azure AD

Job description

Avensys is a reputed global IT professional services company, and our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. And we service a client base across banking and financial services, insurance, information technology, healthcare, retail, and supply chain.

We are currently looking to hire Microsoft Defender XDR Support Engineer – L1/L2. This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.

JOB TYPE:

12 Months Renewable contract

ROLES AND RESPONSIBILITIES

• Provide 24x7 support and hypercare for Microsoft Defender for Endpoint (MDE), Defender for Cloud Apps (MDCA), Microsoft Defender XDR and Microsoft Purview.
• Monitor, triage and investigate security-related issues across Microsoft security platforms.
• Review logs, screenshots, device/policy status, connector status and configuration evidence to identify issues and impact.
• Troubleshoot MDE policies, Intune-related deployments, MDCA connectors/policies and Microsoft Purview capabilities including DLP, IRM and retention/DLM.
• Provide technical guidance and support for issue resolution, remediation and policy-related concerns.
• Coordinate with SOC, IT, Endpoint, Intune, Identity, Compliance and Operations teams to resolve issues.
• Escalate complex or unresolved issues to L3 engineers, SMEs, Microsoft Support or relevant platform owners.
• Maintain accurate ticket updates, issue trackers, investigation notes, resolution summaries and status reports.
• Support go-live, hypercare and post-production activities while following approved processes, runbooks and security standards.
• Communicate effectively with client stakeholders and ensure timely resolution and closure of issues

REQUIREMENTS

• Bachelor's degree in IT, Cybersecurity, Computer Science or a related field is preferred.
• Minimum 5+ 5+ years of experience in cybersecurity, security operations, endpoint security, Microsoft 365 security or enterprise technology support.
• Hands-on experience with Microsoft Defender for Endpoint (MDE), Microsoft Defender for Cloud Apps (MDCA) and Microsoft Purview.
• Good understanding of Microsoft Defender XDR and Microsoft Intune.
• Experience with security policy troubleshooting, including DLP, IRM, retention/DLM and endpoint policies.
• Strong troubleshooting, issue investigation, evidence analysis and problem-solving skills.
• Experience with L1/L2 support, incident/ticket management, escalation and hypercare/go-live support.
• Ability to work with cross-functional teams including SOC, Endpoint, Intune, Identity and Compliance.
• Strong communication and stakeholder management skills.
• Ability to work in a 24x7 rotational support environment.
• Experience in enterprise or regulated environments is an advantage.
• Microsoft certifications such as SC-200, MD-102, SC-900, AZ-500, SC-300 or SC-401 are advantageous.

WHAT’S ON OFFER

You will be remunerated with an excellent base salary and entitled to attractive company benefits. Additionally, you will get the opportunity to enjoy a fun and collaborative work environment, alongside a strong career progression

CONSULTANT DETAILS

Privacy Statement: Data collected will be used for recruitment purposes only. Personal data provided will be used strictly in accordance with the relevant data protection law and Avensys' privacy policy.