L2 Microsoft Defender for Endpoint (MDE) Support Engineer

APAR TECHNOLOGIES PTE. LTD.; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

APAR TECHNOLOGIES PTE. LTD. in Singapore is seeking an experienced Endpoint Security Support professional to provide L2 support for Microsoft Defender for Endpoint, Defender Antivirus, and related security policies. You will manage onboarding, policy deployment, and ASR configurations across enterprise endpoints.

You will review logs, coordinate with SOC and security teams, help go-live and stabilization, document issues, and escalate complex cases to L3 engineers as needed.

Qualifications

• 3+ years in endpoint security support or enterprise Microsoft security environments.
• Hands-on with Defender for Endpoint and Defender Antivirus.
• Experience with EDR configuration, ASR, and Intune policy deployment.
• Familiar with Entra ID Conditional Access and SOC integration.
• Bachelor's degree in IT/cybersecurity preferred; relevant Microsoft certifications desirable.

Responsibilities

• Provide L2 support for Microsoft Defender for Endpoint, Defender Antivirus, EDR configuration, ASR rules, and Intune-based policy deployment.
• Investigate onboarding, endpoint configuration, policy deployment, AV exclusion, ASR behavior, and security policy issues.
• Review logs, screenshots, configuration evidence, and device policy status for troubleshooting.
• Support go-live, Hypercare, and post-implementation stabilization activities.
• Coordinate with Endpoint, Intune, Identity, SOC, and Security teams to identify root causes and implement remediation.
• Escalate complex or unresolved issues to L3 engineers, SMEs, or architects.
• Maintain issue trackers, action notes, troubleshooting evidence, closure updates, and support documentation.

Skills

Endpoint security

Microsoft Defender for Endpoint

EDR configuration

ASR rules

Intune policy deployment

Incident investigation

Documentation

Stakeholder management

MDE onboarding

Entra ID Conditional Access

SOC integration

Education

Bachelor's degree in IT/cybersecurity

Tools

Splunk

Microsoft Sentinel

Job description

Key Responsibilities

• Provide L2 support for Microsoft Defender for Endpoint, Defender Antivirus, EDR configuration, Attack Surface Reduction (ASR) rules, and Intune-based security policy deployment.
• Investigate MDE onboarding, endpoint configuration, policy deployment, AV exclusion, ASR rule, and security policy issues.
• Review logs, screenshots, configuration evidence, connector status, device policy status, and other troubleshooting inputs.
• Support go-live, Hypercare, and post-implementation stabilization activities.
• Coordinate with Endpoint, Intune, Identity, SOC, and Security teams to identify root causes and implement remediation.
• Escalate complex or unresolved issues to L3 engineers, SMEs, or architects.
• Maintain issue trackers, action notes, troubleshooting evidence, closure updates, and support documentation.

Required Skills

• 3+ years of experience in endpoint security support, Microsoft Defender for Endpoint operations, or enterprise Microsoft security environments.
• Hands-on experience with Microsoft Defender for Endpoint (MDE) and Defender Antivirus.
• Strong understanding of EDR configuration, Attack Surface Reduction (ASR) rules, and Microsoft Intune policy deployment .
• Experience troubleshooting MDE onboarding, device policy status, endpoint deployment issues, AV exclusions, and ASR behavior.
• Familiarity with Microsoft Entra ID Conditional Access and SOC integration.
• Exposure to Microsoft Sentinel or Splunk is advantageous.
• Strong incident investigation, technical triage, escalation, and closure-tracking skills.
• Good documentation and stakeholder management skills.

Preferred Experience

• Experience supporting MDE in large enterprise environments.
• Exposure to endpoint security migration and Defender Antivirus transition projects.
• Experience with MDE onboarding and Intune-based Defender policy deployment.
• Experience supporting go-live, Hypercare, warranty, and stabilization activities.
• Experience in client-facing technical support or delivery environments.
• Experience working in regulated enterprise environments is advantageous.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline is preferred.
• Relevant Microsoft certifications such as SC-200, MD-102, SC-900, SC-100, AZ-500, or SC-300 are desirable.

EA Number: 11C4879