# Microsoft Defender for Endpoint (MDE) SME - Implementation Team Lead

> Unison Group · Kuala Lumpur, Malaysia · Full-time · Posted 2026-08-28

**Salary:** unknown currency 12,000–18,000

**Workplace:** on_site

**Department:** Noresh

## Description

We are looking for an experienced **Microsoft Defender for Endpoint (MDE) SME / Implementation Team Lead** to lead enterprise-wide endpoint security implementation and migration activities. The successful candidate will be responsible for translating approved MDE designs into production-ready configurations, leading endpoint onboarding and security policy deployment, and managing migrations from existing antivirus/EDR platforms to Microsoft Defender for Endpoint.

### Key Responsibilities

-   Lead end-to-end **Microsoft Defender for Endpoint implementation** activities covering:

-   Endpoint onboarding
-   Endpoint Detection and Response (EDR)
-   Microsoft Defender Antivirus
-   Attack Surface Reduction (ASR)
-   Endpoint Security
-   Device Control
-   Web Protection
-   Network Protection
-   Automated Investigation and Remediation
-   Indicators
-   Advanced Hunting
-   Threat & Vulnerability Management

-   Lead migration from existing **antivirus, EDR, or endpoint-protection platforms** to Microsoft Defender for Endpoint.
-   Manage migration activities including:

-   Endpoint discovery
-   Compatibility assessment
-   Coexistence/passive mode
-   Pilot groups
-   Deployment rings
-   Phased enforcement
-   Production cutover
-   Validation
-   Rollback planning
-   Legacy agent removal

-   Translate approved MDE architecture and detailed designs into:

-   Configuration workbooks
-   Implementation plans
-   Build procedures
-   Migration procedures
-   Test cases
-   Deployment plans
-   Technical documentation

-   Lead MDE onboarding, configuration walkthroughs, technical testing, policy validation, migration validation, defect resolution, and deployment-readiness activities.
-   Maintain:

-   Configuration records
-   Migration trackers
-   Test evidence
-   Implementation trackers
-   RAID logs
-   Policy inventories
-   Technical runbooks
-   Rollback procedures
-   Knowledge-transfer materials

-   Work closely with **Security Operations, Identity, Endpoint, IT Security, Infrastructure, and client teams** to ensure successful implementation and production rollout.
-   Lead technical discussions, troubleshoot implementation issues, and provide practical recommendations throughout the deployment lifecycle.

### Mandatory Technical Skills

-   Strong hands-on experience with **Microsoft Defender for Endpoint (MDE)**.
-   Enterprise MDE implementation and deployment experience.
-   Strong knowledge of:

-   MDE onboarding
-   EDR
-   Defender Antivirus
-   Attack Surface Reduction (ASR)
-   Endpoint Security
-   Device Control
-   Web Protection
-   Network Protection
-   Automated Investigation & Remediation
-   Indicators
-   Advanced Hunting
-   Threat & Vulnerability Management

-   Experience implementing MDE across:

-   Windows 10/11
-   Windows Servers
-   Mobile devices
-   VDI environments
-   Cloud-hosted endpoints

-   Good understanding of:

-   Microsoft Entra ID / Azure AD
-   Group Policy
-   Microsoft Intune
-   Microsoft Defender XDR
-   Role-Based Access Control (RBAC)
-   Device Groups

### Critical Requirement – AV/EDR Migration

Candidates must have practical experience migrating enterprise endpoints from **third-party antivirus/EDR platforms to Microsoft Defender for Endpoint**.

Experience should include:

**Discovery → Compatibility Assessment → Coexistence/Passive Mode → Pilot → Deployment Rings → Phased Migration → Enforcement → Validation → Rollback → Legacy Agent Removal**

### Consulting & Leadership Skills

-   Ability to lead MDE implementation and migration activities independently.
-   Strong technical communication and stakeholder-management skills.
-   Ability to conduct technical workshops and configuration walkthroughs.
-   Experience coordinating with Security Operations, Identity, Endpoint, IT Security, and client delivery teams.
-   Strong ownership and structured delivery-management capabilities.
-   Ability to convert approved designs into tested, validated, and production-ready configurations.

### Documentation & Knowledge Transfer

Experience creating and maintaining:

-   Configuration workbooks
-   Implementation plans
-   Test cases and evidence
-   Migration trackers
-   Technical runbooks
-   Rollback procedures
-   Policy inventories
-   Knowledge-transfer materials
-   Implementation and deployment documentation

### Qualifications

-   Bachelor's degree in **Information Technology, Cybersecurity, Computer Science, or related discipline** is preferred.

### Preferred Microsoft Certifications

-   SC-200 – Security Operations Analyst
-   MD-102 – Endpoint Administrator
-   SC-900 – Security, Compliance, and Identity Fundamentals
-   SC-100 – Cybersecurity Architect
-   AZ-500 – Azure Security Engineer
-   SC-300 – Identity and Access Administrator

### Preferred Experience

Enterprise-scale MDE implementation experience.

Large-scale endpoint security modernization or transformation projects.

Third-party AV/EDR migration to MDE.

MDE architecture/design handover experience.

Endpoint discovery and prerequisite assessment.

Pilot onboarding and phased deployment.

Unit testing, integration testing and UAT.

Production rollout and enforcement.

Legacy security-agent removal.

Experience leading technical implementation teams.

## Apply

[Apply at Unison Group](https://apply.workable.com/unisongroup/j/0E131932F0/apply)

---
Powered by [Workable](https://www.workable.com)