Senior Microsoft Security Administrator

Accelera Solutions; Virginia (MN); Hybrid; USD 110,000 - 140,000; Full time

Job summary

Accelera Solutions is seeking a security-focused professional to manage Defender for Endpoint, Defender for Cloud, and SIEM integrations across Windows, Linux, and mobile endpoints.

The role emphasizes threat hunting, incident response, and DoD RMF/NIST compliance in a remote setup. You will collaborate with engineering and security teams to maintain controls, generate comprehensive reports, and ensure policy enforcement.

Qualifications

• Bachelor’s degree in computer science, information security, or a related field.
• 3+ years of relevant experience.
• Experience with Microsoft Defender for Endpoint and Microsoft Defender for Cloud, including Defender for Servers.
• Familiarity with endpoint security, threat hunting, and incident response.
• Familiarity with SIEM solutions, especially Microsoft Sentinel.
• DoD 8140 compliant certification such as CompTIA Security+ is preferred.
• Active Secret Clearance is required.

Responsibilities

• Monitor Defender health, alerts, onboarding status, sensor health, policy enforcement and security configuration.
• Ensure NGAV solutions are running optimally and address alerts or issues.
• Maintain Attack Surface Reduction controls and report deviations to engineering.
• Verify real-time updates and threat intelligence from Microsoft cloud are applied.
• Integrate Microsoft Defender with Microsoft Sentinel and other SIEM tools; maintain central logging and dashboards.
• Ensure security across Windows, Linux and mobile devices; report platform-specific issues.
• Generate and review reports on security posture, incidents and compliance; monitor dashboards.
• Follow established procedures for maintaining Defender solutions and escalate anomalies.
• Ensure WDAC policies are correctly applied and functioning; report policy violations.

Skills

Threat hunting

Incident response

Communication

Problem-solving

Education

Bachelor’s degree in Computer Science or related field

Tools

Microsoft Defender for Endpoint

Microsoft Defender for Cloud

Microsoft Sentinel

Active Directory/Entra

Job description

Job Details

Job Location: Remote - Mc Lean, VA 22102

This position is full time remote and requires the candidate hold an active secret clearance.

Responsibilities

1. Monitoring Endpoint Detection and Response (EDR):
   • Continuously monitoring Defender health, alerts, onboarding status, sensor health, policy enforcement, and security configuration.
2. Managing Next-Generation Antivirus (NGAV):
   • Ensure NGAV solutions are running optimally and address any alerts or issues.
   • Perform routine checks and updates to maintain peak performance.
3. Maintaining Attack Surface Reduction:
   • Ensure rules and controls are in place to minimize the attack surface of endpoints, as provided by the SOC
   • Report any deviations or issues to the engineering team for review.
4. Integrating Cloud-Delivered Protection:
   • Verify that real-time updates and threat intelligence from the Microsoft cloud are being received and applied.
   • Report any discrepancies or issues to the engineering team.
5. Connecting with SIEM Solutions:
   • Ensure seamless integration of Microsoft Defender with Microsoft Sentinel and other SIEM tools.
   • Monitor and maintain centralized logging, analytics, and reporting dashboards.
   • Perform data analysis via the SIEM tool as required.
6. Ensuring Cross-Platform Protection:
   • Verify comprehensive security across Windows, Linux, and mobile devices.
   • Report any platform-specific issues to the engineering team.
7. Delivering Comprehensive Reporting and Analytics:
   • Generate and review detailed reports on security posture, incidents, and compliance.
   • Ensure dashboards and alerts are functioning correctly and report any issues.
8. Applying Prescribed Procedures:
   • Follow established procedures and guidelines for maintaining Microsoft Defender solutions.
   • Escalate any issues or anomalies to the engineering team.
9. Implementing Windows Defender Application Control (WDAC):
   • Ensure WDAC policies are correctly applied and functioning as intended.
   • Report any policy violations or issues to the engineering team.
10. Integrating Microsoft Defender, Intune, and Purview for Data Loss Prevention (DLP):
    • Ensure DLP policies are correctly implemented and functioning across endpoints, mobile devices, and cloud services.
    • Implement approved DLP waivers for authorized users and devices.
    • Monitor DLP incidents and report any policy violations or data exfiltration attempts to the engineering team.
    • Maintain unified reporting and alerts for any DLP-related issues.

Qualifications

• A bachelor’s degree in computer science, Information Security, or a related field.
• 3+ Years of relevant experience
• Experience with Microsoft Defender for Endpoint and Microsoft Defender for Cloud, including Defender for Servers.
• Familiarity with endpoint security, threat hunting, and incident response.
• Familiarity with SIEM solutions, especially Microsoft Sentinel.
• Excellent attention to detail and problem-solving skills.
• Good communication and collaboration skills to interact effectively with stakeholders at all levels.
• Understanding of industry compliance standards (e.g., NIST SP 800-53) and relevant regulations (e.g., RMF, DISA STIGs, DoDI 8500.01/8510.01, CMMC/NIST 800-171) is advantageous.
• Willingness to stay updated with the latest cybersecurity trends and emerging security tools.
• Required DoD 8140 compliant certification such as CompTIA Security+
• Secret Clearance

Desired Skills

• Experience with ServiceNow or other ticketing system
• Experience administering and working with Windows and Linux operating systems
• Microsoft Active Directory/Entra
• Microsoft PowerBI Dashboarding
• Advanced PowerShell scripting or prior software development experience
• DoD PKI

Accelera Solutions is an Equal Opportunity Employer/Veterans/Disabled.