Note: The job is a remote job and is open to candidates in USA. Accelera Solutions is seeking a Senior Microsoft Security Administrator to support its Department of Defense customer. The role is responsible for the day-to-day operation, monitoring, integration, reporting, and maintenance of Microsoft Defender, Sentinel, Intune, Purview, and related endpoint security services.
Responsibilities
- Continuously monitoring Defender health, alerts, onboarding status, sensor health, policy enforcement, and security configuration
- Ensure NGAV solutions are running optimally and address any alerts or issues
- Perform routine checks and updates to maintain peak performance
- Ensure rules and controls are in place to minimize the attack surface of endpoints, as provided by the SOC
- Report any deviations or issues to the engineering team for review
- Verify that real-time updates and threat intelligence from the Microsoft cloud are being received and applied
- Report any discrepancies or issues to the engineering team
- Ensure seamless integration of Microsoft Defender with Microsoft Sentinel and other SIEM tools
- Monitor and maintain centralized logging, analytics, and reporting dashboards
- Perform data analysis via the SIEM tool as required
- Verify comprehensive security across Windows, Linux, and mobile devices
- Report any platform-specific issues to the engineering team
- Generate and review detailed reports on security posture, incidents, and compliance
- Ensure dashboards and alerts are functioning correctly and report any issues
- Follow established procedures and guidelines for maintaining Microsoft Defender solutions
- Escalate any issues or anomalies to the engineering team
- Ensure WDAC policies are correctly applied and functioning as intended
- Report any policy violations or issues to the engineering team
- Ensure DLP policies are correctly implemented and functioning across endpoints, mobile devices, and cloud services
- Implement approved DLP waivers for authorized users and devices
- Monitor DLP incidents and report any policy violations or data exfiltration attempts to the engineering team
- Maintain unified reporting and alerts for any DLP-related issues
Skills
- ***This position is full time remote and requires the candidate hold an active secret clearance.***
- • A bachelor's degree in computer science, Information Security, or a related field
- • 3+ Years of relevant experience
- • Experience with Microsoft Defender for Endpoint and Microsoft Defender for Cloud, including Defender for Servers
- • Familiarity with endpoint security, threat hunting, and incident response
- • Familiarity with SIEM solutions, especially Microsoft Sentinel
- • Excellent attention to detail and problem-solving skills
- • Good communication and collaboration skills to interact effectively with stakeholders at all levels
- • Understanding of industry compliance standards (e.g., NIST SP 800-53) and relevant regulations (e.g., RMF, DISA STIGs, DoDI 8500.01/8510.01, CMMC/NIST 800-171) is advantageous
- • Willingness to stay updated with the latest cybersecurity trends and emerging security tools
- • Required DoD 8140 compliant certification such as CompTIA Security+
- • Secret Clearance
- • Experience with ServiceNow or other ticketing system
- • Experience administering and working with Windows and Linux operating systems
- • Microsoft Active Directory/Entra
- • Microsoft PowerBI Dashboarding
- • Advanced PowerShell scripting or prior software development experience
- • DoD PKI
Benefits
- This position is full time remote
Company Overview