Unison Group

Builds financial risk and compliance systems

Level 1 Support SME - Multiple Teams

Security Operations & Incident ResponseConfirmed live in the last 24 hours

Full-timeKuala Lumpur, Federal Territory of Kuala Lumpur, MalaysiaNo salary listedIn-person

About the Job

Requirements

Experience in L1 support, security operations, endpoint support, service desk coordination, or Microsoft 365 operational support.
Working knowledge of Microsoft Defender for Endpoint, Microsoft Defender for Cloud Apps, Microsoft Purview, and their respective management portals.
Ability to perform initial investigation of Microsoft Defender for Endpoint incidents, alerts, device timelines, endpoint health, onboarding status, and policy deployment.
Ability to review Microsoft Defender for Cloud Apps alerts, activities, connected applications, policies, cloud-discovery information, and connector status.
Familiarity with Purview Information Protection, sensitivity labels, Data Loss Prevention, Endpoint Data Loss Prevention, Insider Risk Management, and Data Lifecycle Management.
Understanding of customer-ticket handling, alert triage, log collection, evidence documentation, escalation management, and issue lifecycle tracking.
Ability to follow approved runbooks, knowledge articles, support guides, and escalation procedures without making unauthorised production changes.

Responsibilities

Provide L1 operational support for Microsoft Defender for Endpoint, Microsoft Defender for Cloud Apps, and Microsoft Purview incidents, alerts, requests, and customer tickets.
Perform initial ticket intake, categorisation, prioritisation, user-impact assessment, and investigation based on available evidence and approved support guidance.
Investigate Microsoft Defender for Endpoint alerts, incidents, device timelines, antivirus detections, device health, onboarding status, sensor health, and endpoint policy status.
Investigate Microsoft Defender for Cloud Apps alerts, user activities, connected applications, cloud-discovery information, activity policies, anomaly detections, and connector health.
Review Purview alerts and events related to Information Protection, sensitivity labels, Data Loss Prevention, Endpoint Data Loss Prevention, Insider Risk Management, and Data Lifecycle Management.
Collect screenshots, diagnostic packages, logs, alert details, policy status, connector status, audit records, and validation outputs required for issue investigation.
Perform basic runbook-based troubleshooting and escalate unresolved or complex issues to L2, L3, platform subject-matter experts, Microsoft Support, or relevant client teams.
Maintain clear ticket notes, investigation findings, supporting evidence, customer updates, escalation details, and closure information within agreed service levels.

L1 Support SME - Microsoft Defender for Endpoint, MDCA & Purview

Unison Group · Kuala Lumpur, Malaysia · Full-time · Posted 2026-09-03

Salary: unknown currency 5,000–12,000

Workplace: on_site

Department: Noresh

Description

Provide L1 operational support for Microsoft Defender for Endpoint, Microsoft Defender for Cloud Apps, and Microsoft Purview incidents, alerts, requests, and customer tickets.
Perform initial ticket intake, categorisation, prioritisation, user-impact assessment, and investigation based on available evidence and approved support guidance.
Investigate MDE alerts, incidents, device timelines, antivirus detections, device health, onboarding status, sensor health, and endpoint policy status.
Investigate MDCA alerts, user activities, connected applications, cloud-discovery information, activity policies, anomaly detections, and connector health.
Review Purview alerts and events related to Information Protection, sensitivity labels, Data Loss Prevention, Endpoint DLP, Insider Risk Management, and Data Lifecycle Management.
Collect screenshots, diagnostic packages, logs, alert details, policy status, connector status, audit records, and validation outputs required for issue investigation.
Perform basic runbook-based troubleshooting and escalate unresolved or complex issues to L2, L3, platform SMEs, Microsoft Support, or relevant client teams.
Maintain clear ticket notes, investigation findings, supporting evidence, customer updates, escalation details, and closure information within agreed service levels.

Requirements

Experience in L1 support, security operations, endpoint support, service desk coordination, or Microsoft 365 operational support.
Working knowledge of Microsoft Defender for Endpoint, Microsoft Defender for Cloud Apps, Microsoft Purview, and their respective management portals.
Ability to perform initial investigation of MDE incidents, alerts, device timelines, endpoint health, onboarding status, and policy deployment.
Ability to review MDCA alerts, activities, connected applications, policies, cloud-discovery information, and connector status.
Familiarity with Purview Information Protection, sensitivity labels, DLP, Endpoint DLP, Insider Risk Management, and Data Lifecycle Management.
Understanding of customer-ticket handling, alert triage, log collection, evidence documentation, escalation management, and issue lifecycle tracking.
Ability to follow approved runbooks, knowledge articles, support guides, and escalation procedures without making unauthorised production changes.

Apply

Apply at Unison Group

About the Company

Unison Group

Builds financial risk and compliance systems

Unison Group builds technology systems for financial institutions that need to manage risk, meet reporting rules and modernize their operations. Its consultants work across liquidity, market and credit risk, combining financial knowledge with software implementation and data analysis. The business also designs cloud infrastructure and develops custom applications, connecting these systems with the information and processes clients already use. It earns money through consulting, technology implementation and engineering services for enterprises, with work ranging from system design to deployment. Founded as Unison Consulting in 2012, the group is headquartered in Singapore.

Company size: 201-500
Company stage: Not listed
Total funding: Not listed
Headquarters: Not listed
Founded: 2012

Recently Posted Jobs

Explore more opportunities at Unison Group

See more jobs