Senior Microsoft Security Administrator

Accelera Solutions; Northern (KY); Hybrid; USD 100,000 - 150,000; Full time

Job summary

Accelera Solutions is seeking a detail-oriented Microsoft Security Administrator to join our DoD-focused team. This fully remote role requires an active secret clearance and will manage Microsoft Defender services across endpoints, cloud, and SIEM integrations for a critical mission.

The candidate will monitor Defender health, NGAV, ASR, WDAC, and DLP, while collaborating with engineering to maintain secure, compliant environments across Windows, Linux, and mobile devices.

Qualifications

• Bachelor's degree in computer science, information security or related field.
• 3+ years of relevant experience in cybersecurity roles.
• Experience with Microsoft Defender for Endpoint and Defender for Cloud (including Defender for Servers).
• Familiarity with endpoint security, threat hunting and incident response.
• Familiarity with SIEM solutions, especially Microsoft Sentinel.
• Attention to detail and problem-solving skills.
• Strong communication and collaboration with stakeholders at all levels.
• Understanding of standards (NIST SP 800-53, RMF, DISA STIGs, DoDI 8500.01/8510.01, CMMC/NIST 800-171) is advantageous.
• DoD 8140 compliant certification such as CompTIA Security+ required.
• Active DoD Secret Clearance.

Responsibilities

• Monitor Defender health, alerts, onboarding status, sensor health and policy enforcement.
• Ensure NGAV solutions run optimally; perform routine checks and updates.
• Maintain Attack Surface Reduction controls and report deviations.
• Verify real-time updates and threat intel from the Microsoft cloud are applied.
• Integrate Defender with Microsoft Sentinel and other SIEM tools; maintain dashboards.
• Ensure cross-platform protection for Windows, Linux, and mobile devices.
• Generate and review security posture reports and compliance dashboards.
• Follow procedures for maintaining Defender solutions; escalate issues.
• Ensure WDAC policies are properly applied and functioning.
• Implement DLP across endpoints, mobile devices, and cloud services; monitor incidents.

Skills

Endpoint security

Threat hunting

Incident response

PowerShell scripting

Education

Bachelor's degree in Computer Science, Information Security, or related field

CompTIA Security+ (DoD 8140 compliant)

Tools

Microsoft Defender for Endpoint

Microsoft Defender for Cloud

Microsoft Sentinel

Windows

Linux

Job description

Fully Remote Remote - Mc Lean, VA 22102

Description

This position is full time remote and requires the candidate hold an active secret clearance.

Are you detail-oriented and passionate about cybersecurity? We’re searching for a Microsoft Security Administrator to join our dynamic team and ensure the smooth, day-to-day operation of our Microsoft Defender services for our Department of Defense (DoD) customer. If you’re committed to maintaining high security standards and eager to contribute to a critical mission, this could be the perfect opportunity for you!

Responsibilities

1. Monitoring Endpoint Detection and Response (EDR): Continuously monitoring Defender health, alerts, onboarding status, sensor health, policy enforcement, and security configuration.
2. Managing Next-Generation Antivirus (NGAV): Ensure NGAV solutions are running optimally and address any alerts or issues. Perform routine checks and updates to maintain peak performance.
3. Maintaining Attack Surface Reduction: Ensure rules and controls are in place to minimize the attack surface of endpoints, as provided by the SOC. Report any deviations or issues to the engineering team for review.
4. Integrating Cloud-Delivered Protection: Verify that real-time updates and threat intelligence from the Microsoft cloud are being received and applied. Report any discrepancies or issues to the engineering team.
5. Connecting with SIEM Solutions: Ensure seamless integration of Microsoft Defender with Microsoft Sentinel and other SIEM tools. Monitor and maintain centralized logging, analytics, and reporting dashboards. Perform data analysis via the SIEM tool as required.
6. Ensuring Cross-Platform Protection: Verify comprehensive security across Windows, Linux, and mobile devices. Report any platform-specific issues to the engineering team.
7. Delivering Comprehensive Reporting and Analytics: Generate and review detailed reports on security posture, incidents, and compliance. Ensure dashboards and alerts are functioning correctly and report any issues.
8. Applying Prescribed Procedures: Follow established procedures and guidelines for maintaining Microsoft Defender solutions. Escalate any issues or anomalies to the engineering team.
9. Implementing Windows Defender Application Control (WDAC): Ensure WDAC policies are correctly applied and functioning as intended. Report any policy violations or issues to the engineering team.
10. Integrating Microsoft Defender, Intune, and Purview for Data Loss Prevention (DLP): Ensure DLP policies are correctly implemented and functioning across endpoints, mobile devices, and cloud services. Implement approved DLP waivers for authorized users and devices. Monitor DLP incidents and report any policy violations or data exfiltration attempts to the engineering team. Maintain unified reporting and alerts for any DLP-related issues.

Qualifications

• A bachelor’s degree in computer science, Information Security, or a related field.
• 3+ Years of relevant experience
• Experience with Microsoft Defender for Endpoint and Microsoft Defender for Cloud, including Defender for Servers.
• Familiarity with endpoint security, threat hunting, and incident response.
• Familiarity with SIEM solutions, especially Microsoft Sentinel.
• Excellent attention to detail and problem-solving skills.
• Good communication and collaboration skills to interact effectively with stakeholders at all levels.
• Understanding of industry compliance standards (e.g., NIST SP 800-53) and relevant regulations (e.g., RMF, DISA STIGs, DoDI 8500.01/8510.01, CMMC/NIST 800-171) is advantageous.
• Willingness to stay updated with the latest cybersecurity trends and emerging security tools.
• Required DoD 8140 compliant certification such as CompTIA Security+
• Active DoD Secret Clearance

Desired Skills

• Experience with ServiceNow or other ticketing system
• Experience administering and working with Windows and Linux operating systems
• Microsoft Active Directory/Entra
• Microsoft PowerBI Dashboarding
• Advanced PowerShell scripting or prior software development experience
• DoD PKI

Accelera Solutions is an Equal Opportunity Employer/Veterans/Disabled.