Microsoft Defender for Endpoint Implementation Team Lead - Microsoft Defender for Endpoint

Microsoft Defender for Endpoint (MDE) SME - Implementation Team Lead

Unison Group · Kuala Lumpur, Malaysia · Full-time · Posted 2026-08-28

Salary: unknown currency 12,000–18,000

Workplace: on_site

Department: Noresh

Description

We are looking for an experienced Microsoft Defender for Endpoint (MDE) SME / Implementation Team Lead to lead enterprise-wide endpoint security implementation and migration activities. The successful candidate will be responsible for translating approved MDE designs into production-ready configurations, leading endpoint onboarding and security policy deployment, and managing migrations from existing antivirus/EDR platforms to Microsoft Defender for Endpoint.

Key Responsibilities

• Lead end-to-end Microsoft Defender for Endpoint implementation activities covering:

• Endpoint onboarding

• Endpoint Detection and Response (EDR)
• Microsoft Defender Antivirus
• Attack Surface Reduction (ASR)
• Endpoint Security
• Device Control
• Web Protection
• Network Protection
• Automated Investigation and Remediation
• Indicators
• Advanced Hunting

• Threat & Vulnerability Management

• Lead migration from existing antivirus, EDR, or endpoint-protection platforms to Microsoft Defender for Endpoint.

• Manage migration activities including:

• Endpoint discovery

• Compatibility assessment
• Coexistence/passive mode
• Pilot groups
• Deployment rings
• Phased enforcement
• Production cutover
• Validation
• Rollback planning

• Legacy agent removal

• Translate approved MDE architecture and detailed designs into:

• Configuration workbooks

• Implementation plans
• Build procedures
• Migration procedures
• Test cases
• Deployment plans

• Technical documentation

• Lead MDE onboarding, configuration walkthroughs, technical testing, policy validation, migration validation, defect resolution, and deployment-readiness activities.

• Maintain:

• Configuration records

• Migration trackers
• Test evidence
• Implementation trackers
• RAID logs
• Policy inventories
• Technical runbooks
• Rollback procedures

• Knowledge-transfer materials

• Work closely with Security Operations, Identity, Endpoint, IT Security, Infrastructure, and client teams to ensure successful implementation and production rollout.

• Lead technical discussions, troubleshoot implementation issues, and provide practical recommendations throughout the deployment lifecycle.

Mandatory Technical Skills

• Strong hands-on experience with Microsoft Defender for Endpoint (MDE).
• Enterprise MDE implementation and deployment experience.

• Strong knowledge of:

• MDE onboarding

• EDR
• Defender Antivirus
• Attack Surface Reduction (ASR)
• Endpoint Security
• Device Control
• Web Protection
• Network Protection
• Automated Investigation & Remediation
• Indicators
• Advanced Hunting

• Threat & Vulnerability Management

• Experience implementing MDE across:

• Windows 10/11

• Windows Servers
• Mobile devices
• VDI environments

• Cloud-hosted endpoints

• Good understanding of:

• Microsoft Entra ID / Azure AD

• Group Policy
• Microsoft Intune
• Microsoft Defender XDR
• Role-Based Access Control (RBAC)
• Device Groups

Critical Requirement – AV/EDR Migration

Candidates must have practical experience migrating enterprise endpoints from third-party antivirus/EDR platforms to Microsoft Defender for Endpoint.

Experience should include:

Discovery → Compatibility Assessment → Coexistence/Passive Mode → Pilot → Deployment Rings → Phased Migration → Enforcement → Validation → Rollback → Legacy Agent Removal

Consulting & Leadership Skills

• Ability to lead MDE implementation and migration activities independently.
• Strong technical communication and stakeholder-management skills.
• Ability to conduct technical workshops and configuration walkthroughs.
• Experience coordinating with Security Operations, Identity, Endpoint, IT Security, and client delivery teams.
• Strong ownership and structured delivery-management capabilities.
• Ability to convert approved designs into tested, validated, and production-ready configurations.

Documentation & Knowledge Transfer

Experience creating and maintaining:

• Configuration workbooks
• Implementation plans
• Test cases and evidence
• Migration trackers
• Technical runbooks
• Rollback procedures
• Policy inventories
• Knowledge-transfer materials
• Implementation and deployment documentation

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related discipline is preferred.

Preferred Microsoft Certifications

• SC-200 – Security Operations Analyst
• MD-102 – Endpoint Administrator
• SC-900 – Security, Compliance, and Identity Fundamentals
• SC-100 – Cybersecurity Architect
• AZ-500 – Azure Security Engineer
• SC-300 – Identity and Access Administrator

Preferred Experience

Enterprise-scale MDE implementation experience.

Large-scale endpoint security modernization or transformation projects.

Third-party AV/EDR migration to MDE.

MDE architecture/design handover experience.

Endpoint discovery and prerequisite assessment.

Pilot onboarding and phased deployment.

Unit testing, integration testing and UAT.

Production rollout and enforcement.

Legacy security-agent removal.

Experience leading technical implementation teams.

Apply

Apply at Unison Group

---

Powered by Workable