Training & Knowledge Transfer Engineer - MDE, MDCA & Microsoft Purview

Unison Group; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Unison Group in Kuala Lumpur, Malaysia, seeks a Training & Knowledge Transfer Engineer with hands-on experience in Microsoft Defender for Endpoint, Defender for Cloud Apps, Defender XDR, Intune, and Purview to plan and deliver technical training, workshops, and handover activities.

You will explain, demonstrate, troubleshoot, and train teams on the implemented Microsoft security solutions, while producing documentation, SOPs, runbooks, and knowledge articles to support the transition to BAU

Qualifications

• 5+ years of experience in security training, technical knowledge transfer, endpoint support, or enterprise technology delivery.
• Hands-on with Microsoft Defender for Endpoint, Defender for Cloud Apps, Defender XDR, Purview, and Intune.
• Ability to explain, demonstrate, troubleshoot and train teams on Microsoft security solutions.
• Produce high-quality documentation, SOPs, runbooks, and handover materials.

Responsibilities

• Plan and deliver structured training and knowledge-transfer sessions for MDE, MDCA, and Purview.
• Conduct technical workshops covering onboarding, sensor health, policy deployment, data sources, and DLP.
• Demonstrate configurations, explain policy behavior, monitoring, and operational processes.
• Prepare training presentations, demonstration materials, SOPs, runbooks, and knowledge articles.
• Coordinate training with client IT, Endpoint, Intune, Identity, Compliance, SOC, and Operations teams.
• Maintain attendance, feedback, assessments, action trackers, and handover status.

Skills

MDE

MDCA

Defender XDR

Intune

Purview

Training delivery

Knowledge transfer

Troubleshooting

Documentation

Job description

We are looking for a Training & Knowledge Transfer Engineer with strong hands-on experience in Microsoft Defender for Endpoint (MDE), Microsoft Defender for Cloud Apps (MDCA), Microsoft Defender XDR, Microsoft Intune, and Microsoft Purview.

The role will be responsible for planning and delivering technical training, workshops, demonstrations, knowledge-transfer sessions, and operational handover activities following Microsoft security implementations.

The ideal candidate should be technically strong enough to explain, demonstrate, troubleshoot, and train teams on the implemented Microsoft security solutions, while also producing high-quality documentation, SOPs, runbooks, and handover materials.

Key Responsibilities

• Plan and deliver structured training and knowledge-transfer sessions for MDE, MDCA, and Microsoft Purview based on approved designs, implemented configurations, SOPs, and handover plans.
• Conduct technical workshops covering:
• MDE onboarding
• MDE sensor health
• Intune security policy deployment
• MDCA connectors and data sources
• Security policies and alert behaviour
• Microsoft Purview Information Protection
• DLP
• Insider Risk Management (IRM)
• Data Lifecycle Management (DLM)
• Demonstrate implemented configurations and explain policy behaviour, monitoring, troubleshooting, and operational processes.
• Prepare and maintain:
• Training presentations
• Demonstration materials
• Operational guides
• Troubleshooting guides
• SOPs
• Runbooks
• Knowledge articles
• Recorded training sessions
• Handover documentation
• Conduct operational handover sessions covering:
• Support processes
• Roles and responsibilities
• Escalation procedures
• Ticket handling
• Monitoring requirements
• Troubleshooting
• Service management processes
• Coordinate training activities with client:
• IT
• Endpoint
• Intune
• Identity
• Compliance
• SOC
• Operations teams
• Identify knowledge gaps and tailor training accordingly.
• Maintain training attendance, feedback, knowledge assessments, action trackers, open-question logs, SOP updates, handover status, and completion reports.
• Support project-to-operations transition and ensure agreed knowledge-transfer deliverables are completed.

Mandatory Technical Skills

• 5+ years of experience in security training, technical knowledge transfer, endpoint support, Microsoft 365 security operations, platform enablement, or enterprise technology delivery.
• Hands-on experience with:
• Microsoft Defender for Endpoint (MDE)
• Microsoft Defender for Cloud Apps (MDCA)
• Microsoft Defender XDR
• Microsoft Purview
• Microsoft Intune
• Strong knowledge of:
• MDE onboarding and policies
• MDE sensor health
• MDCA connectors
• MDCA alerts and data sources
• Purview Information Protection
• Sensitivity labels
• DLP
• Endpoint DLP
• Insider Risk Management (IRM)
• Data Lifecycle Management (DLM)
• Strong understanding of technical training, workshop facilitation, product demonstrations, knowledge assessment, documentation, SOP development, and operational handover.

Training & Knowledge Transfer Skills

The candidate must be able to:

• Conduct classroom and virtual technical training.
• Conduct demonstration-led workshops.
• Explain complex Microsoft security concepts to technical and non-technical audiences.
• Perform train-the-trainer sessions.
• Create structured training materials and presentations.
• Demonstrate implemented configurations.
• Conduct knowledge assessments.
• Identify and close knowledge gaps.
• Create operational SOPs, runbooks, and troubleshooting documentation.
• Support transition from project implementation to BAU operations.

Consulting & Delivery Skills

• Engage directly with client IT, Endpoint, Compliance, SOC, and Operations stakeholders.
• Lead technical workshops independently.
• Translate technical configurations into easy-to-understand operational guidance.
• Manage training schedules, participants, action items, and completion tracking.
• Demonstrate strong ownership and stakeholder-management skills.
• Work effectively in structured enterprise project and transition environments.
• Support regulated or security-sensitive enterprise environments