Defender Administrator

Job Details

Job Title:

Defender Administrator (Active SC clearnace Manadatory)

Location:

Gloucester / Warrington ( 2 to 3days) Job Purpose and Primary Objectives To Migrate Symantec/McAfee Legacy Antivirus Solution to Microsoft Windows Defender (ATP) on Windows and Linux servers.

Key Responsibilities Defender Administrator will play a key role in migrating Windows and Linux servers to Defender (ATP) from Legacy AV Solutions (Symantec, McAfee). Responsible for:
To validate the current AV exclusion policy in estate Implement MDE policies AAD devices group creation to implement exclusion and policy deployment Creating migration approach that is best suited for complex nuclear sensitive environment Network connectivity testing between source and destination Defender Installation File creation and distribution Leading discussion with the Image management team for MDE image that would be used for Auto scaling environment Key Skills / Knowledge Hands on Experience onboarding MS and Linux server to Microsoft Defender Must have managed complex migration Must have AV exclusion management skills Have knowledge and experience with Microsoft technologies such as but not limited to:
Microsoft Defender for server Microsoft Defender for O365 Microsoft Defender for Identity Microsoft 365 Defender Microsoft Cloud App Security Good knowledge around server Detection and Response (EDR), Threat & Vulnerability Management (TVM), Attack Surface Reduction (ASR), and Auto Investigation and Remediation (AIR)

Experience with Symantec server Protection (SEPM) Experience in McAfee / Windows Defender Antivirus Policy, Group and Task Configuration In depth knowledge of Windows operating systems including Client (7/8/10) and Server OS (2008/2012/2016) and Linux RHEL Documenting the deployment approach Documenting and creating MDE policy Investigative and analytical problem-solving skills across Windows Infrastructure Developing, coordinating, and maintaining organizational security procedures, processes, and practices and supporting security documentation activities Remove legacy Antivirus solution from Servers Hands on Experience in deploying ATP Package through GPO, SCCM or through Intune Good Understanding of Threat analysis, Threat Hunting, and remediating security issues on End Points Hands on Experience on Creation of Policy, file Exclusions, Monitoring Dashboard, Reporting, etc End to end Support Coverage for Microsoft Defender Ensure High level of Security controls are deployed on end points as per the best practices Experience Required 4 Years  Duration of Assignment 2 months Special Working Conditions (Travel, On-call etc.)

Should be ready to work out of hours (based on project requirement) post approval from Supervisor Candidate to complete SC transfer process prior to onboarding Candidate to complete In person  prior to joining Candidate to complete mandatory training (online) prior to joining Additional Remarks Certified Security Cleared or ability to be achieve on application Person Specification INFORMING Provides the information people need to know to do their jobs and to feel good about being part of the team, unit, and/or the organization.

Is able to provide informative and quantifiable information so that accurate decision making can be taken in a timely manner. PROBLEM SOLVING Uses rigorous logic and methods to solve difficult problems with effective solutions and probes all fruitful sources for answers. Can see hidden problems and is excellent at detailed analysis by looking beyond the obvious and doesn't stop at the first answer.

TECHNICAL LEARNING Able to learn new skills quickly and is adept at learning new industry skills and competencies via various methods, including research and attendance at technical courses and seminars etc. Key Relationships & Contacts With Client Establish and maintain excellent relationship with customer stakeholders and develop processes to improve efficiency and effectiveness for the client as an on-going basis.

With Line Manager / Senior Stakeholders Maintain regular contact with Line Manager / Senior Stakeholders to update and appraise them on critical business issues…