Security Operations Analyst (L1) – MS- Defender

📋 Description

• Monitor Microsoft Defender portals, security dashboards, alerts and incident queues
• Perform initial triage of malware detections, suspicious activities and endpoint security alerts
• Review alert details, device information, severity and timestamps to assess potential impact
• Perform basic checks on Defender sensor health, endpoint onboarding and protection status
• Identify endpoints with failed scans, outdated security intelligence or protection-related issues
• Escalate suspicious activities and high-severity alerts according to established procedures

🎯 Requirements

• 1–3 years of experience in IT operations, security monitoring, endpoint support or security
• Basic understanding of endpoint security, antivirus, malware detection and security alerts
• Familiarity with Microsoft Defender for Endpoint or equivalent endpoint protection tools
• Basic knowledge of Windows operating systems, processes and endpoint health
• Ability to review alerts, capture evidence and follow documented investigation procedures
• Understanding of incident severity, escalation matrices and SLA requirements