Microsoft Defender for Endpoint (MDE) SME - Implementation Team Lead
LocationKuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia
Typefull-time
SeniorityLead
DepartmentNoresh
Company size1,001–5,000 people
PostedAug 28, 2026 · 1mo ago
Verified live1d ago
At a glanceSummarised by Seekless from the posting.
Strong hands-on experience with Microsoft Defender for Endpoint (MDE)
Enterprise MDE implementation and deployment experience
Strong knowledge of: MDE onboarding, EDR, Defender Antivirus, Attack Surface Reduction (ASR), Endpoint Security, Device Control, Web Protection, Network Protection, Automated Investigation & Remediation, Indicators, Advanced Hunting, Threat & Vulnerability Management
Experience implementing MDE across: Windows 10/11, Windows Servers, Mobile devices, VDI environments, Cloud-hosted endpoints
Good understanding of: Microsoft Entra ID / Azure AD, Group Policy, Microsoft Intune, Microsoft Defender XDR, Role-Based Access Control (RBAC), Device Groups
Practical experience migrating enterprise endpoints from third-party antivirus/EDR platforms to Microsoft Defender for Endpoint, including: Discovery → Compatibility Assessment → Coexistence/Passive Mode → Pilot → Deployment Rings → Phased Migration → Enforcement → Validation → Rollback → Legacy Agent Removal
Ability to lead MDE implementation and migration activities independently
Strong technical communication and stakeholder-management skills
Ability to conduct technical workshops and configuration walkthroughs
Experience coordinating with Security Operations, Identity, Endpoint, IT Security, and client delivery teams
Strong ownership and structured delivery-management capabilities
Ability to convert approved designs into tested, validated, and production-ready configurations
Experience creating and maintaining: Configuration workbooks, Implementation plans, Test cases and evidence, Migration trackers, Technical runbooks, Rollback procedures, Policy inventories, Knowledge-transfer materials, Implementation and deployment documentation
Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related discipline is preferred
SC-200 – Security Operations Analyst
MD-102 – Endpoint Administrator
SC-900 – Security, Compliance, and Identity Fundamentals
SC-100 – Cybersecurity Architect
AZ-500 – Azure Security Engineer
SC-300 – Identity and Access Administrator
Enterprise-scale MDE implementation experience
Large-scale endpoint security modernization or transformation projects
Third-party AV/EDR migration to MDE
MDE architecture/design handover experience
Endpoint discovery and prerequisite assessment
Pilot onboarding and phased deployment
Unit testing, integration testing and UAT
Production rollout and enforcement
Legacy security-agent removal
Experience leading technical implementation teams
Skills
Microsoft Defender for Endpoint
Windows 10/11
Windows Servers
Microsoft Entra ID
Azure AD
Group Policy
Microsoft Intune
Microsoft Defender XDR
Role-Based Access Control (RBAC)
Device Groups
About the role
We are looking for an experienced Microsoft Defender for Endpoint (MDE) SME / Implementation Team Lead to lead enterprise-wide endpoint security implementation and migration activities. The successful candidate will be responsible for translating approved MDE designs into production-ready configurations, leading endpoint onboarding and security policy deployment, and managing migrations from existing antivirus/EDR platforms to Microsoft Defender for Endpoint.
Key Responsibilities
•
Lead end-to-end Microsoft Defender for Endpoint implementation activities covering:
•
Endpoint onboarding
•
Endpoint Detection and Response (EDR)
•
Microsoft Defender Antivirus
•
Attack Surface Reduction (ASR)
•
Endpoint Security
•
Device Control
•
Web Protection
•
Network Protection
•
Automated Investigation and Remediation
•
Indicators
•
Advanced Hunting
•
Threat & Vulnerability Management
•
Lead migration from existing antivirus, EDR, or endpoint-protection platforms to Microsoft Defender for Endpoint.
•
Manage migration activities including:
•
Endpoint discovery
•
Compatibility assessment
•
Coexistence/passive mode
•
Pilot groups
•
Deployment rings
•
Phased enforcement
•
Production cutover
•
Validation
•
Rollback planning
•
Legacy agent removal
•
Translate approved MDE architecture and detailed designs into:
•
Configuration workbooks
•
Implementation plans
•
Build procedures
•
Migration procedures
•
Test cases
•
Deployment plans
•
Technical documentation
•
Lead MDE onboarding, configuration walkthroughs, technical testing, policy validation, migration validation, defect resolution, and deployment-readiness activities.
•
Maintain:
•
Configuration records
•
Migration trackers
•
Test evidence
•
Implementation trackers
•
RAID logs
•
Policy inventories
•
Technical runbooks
•
Rollback procedures
•
Knowledge-transfer materials
•
Work closely with Security Operations, Identity, Endpoint, IT Security, Infrastructure, and client teams to ensure successful implementation and production rollout.
•
Lead technical discussions, troubleshoot implementation issues, and provide practical recommendations throughout the deployment lifecycle.
Mandatory Technical Skills
•
Strong hands-on experience with Microsoft Defender for Endpoint (MDE).
•
Enterprise MDE implementation and deployment experience.
•
Strong knowledge of:
•
MDE onboarding
•
EDR
•
Defender Antivirus
•
Attack Surface Reduction (ASR)
•
Endpoint Security
•
Device Control
•
Web Protection
•
Network Protection
•
Automated Investigation & Remediation
•
Indicators
•
Advanced Hunting
•
Threat & Vulnerability Management
•
Experience implementing MDE across:
•
Windows 10/11
•
Windows Servers
•
Mobile devices
•
VDI environments
•
Cloud-hosted endpoints
•
Good understanding of:
•
Microsoft Entra ID / Azure AD
•
Group Policy
•
Microsoft Intune
•
Microsoft Defender XDR
•
Role-Based Access Control (RBAC)
•
Device Groups
Critical Requirement – AV/EDR Migration
Candidates must have practical experience migrating enterprise endpoints from third-party antivirus/EDR platforms to Microsoft Defender for Endpoint.
Experience should include:
Discovery → Compatibility Assessment → Coexistence/Passive Mode → Pilot → Deployment Rings → Phased Migration → Enforcement → Validation → Rollback → Legacy Agent Removal
Consulting & Leadership Skills
•
Ability to lead MDE implementation and migration activities independently.
•
Strong technical communication and stakeholder-management skills.
•
Ability to conduct technical workshops and configuration walkthroughs.
•
Experience coordinating with Security Operations, Identity, Endpoint, IT Security, and client delivery teams.
•
Strong ownership and structured delivery-management capabilities.
•
Ability to convert approved designs into tested, validated, and production-ready configurations.
Documentation & Knowledge Transfer
Experience creating and maintaining:
•
Configuration workbooks
•
Implementation plans
•
Test cases and evidence
•
Migration trackers
•
Technical runbooks
•
Rollback procedures
•
Policy inventories
•
Knowledge-transfer materials
•
Implementation and deployment documentation
Qualifications
•
Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related discipline is preferred.
Preferred Microsoft Certifications
•
SC-200 – Security Operations Analyst
•
MD-102 – Endpoint Administrator
•
SC-900 – Security, Compliance, and Identity Fundamentals
•
SC-100 – Cybersecurity Architect
•
AZ-500 – Azure Security Engineer
•
SC-300 – Identity and Access Administrator
Preferred Experience
Enterprise-scale MDE implementation experience.
Large-scale endpoint security modernization or transformation projects.
Third-party AV/EDR migration to MDE.
MDE architecture/design handover experience.
Endpoint discovery and prerequisite assessment.
Pilot onboarding and phased deployment.
Unit testing, integration testing and UAT.
Production rollout and enforcement.
Legacy security-agent removal.
Experience leading technical implementation teams.