Security Consulting Practitioner

What you will do
• Provide L2 hypercare support for MDE, MDCA, and Microsoft Purview issues aligned to the signed-off design, build guidance, and agreed support process.
• Investigate escalated issues involving MDE policy deployment through Intune, MDCA connectors, data sources, policy behavior, and Purview IP, DLP, IRM, and DLM configurations.
• Review screenshots, logs, connector status, device policy status, policy status, validation outputs, and configuration evidence to validate issue cause and impact.
• Provide technical remediation guidance for configuration deviations, policy behavior issues, DLP tuning, label publishing, IRM alert triage, retention behavior, and alert routing concerns.
• Coordinate with client IT, SOC, endpoint, Intune, identity, compliance, and operations teams to progress troubleshooting and confirm closure actions.
• Escalate unresolved or complex issues to L3 engineers, SMEs, Microsoft support, or platform owners where deeper product or design clarification is required.
• Maintain issue tracker updates, advisory notes, action status, resolution summaries, and phase closure inputs for hypercare reporting.
Skills and experiences
Required technical skills
• 5–10 years of experience in security support, endpoint support, Microsoft 365 security operations, platform support, or enterprise technology delivery.
• Hands-on knowledge of Microsoft Defender for Endpoint, Microsoft Defender for Cloud Apps, Microsoft Defender XDR concepts, and Microsoft Purview.
• Strong understanding of L2 troubleshooting, issue investigation, evidence review, technical remediation guidance, escalation handling, and issue lifecycle management.
• Experience supporting MDE policy deployment, MDCA connector or policy issues, and Purview IP, DLP, IRM, and DLM policy behavior.
• Familiarity with hypercare support models, issue trackers, advisory support notes, and enterprise stakeholder communication.

Consulting and delivery skills
Able to engage directly with client IT, SOC, endpoint, compliance, and operations stakeholders. Strong ownership mindset with the ability to explain findings, validate remediation options, coordinate escalations, and maintain clear issue documentation during hypercare support.
Qualifications
Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field is preferred.
Desirable Microsoft certifications include SC-200, MD-102, SC-900, AZ-500, SC-300, SC-401.

Preferred experience
• Experience in enterprise Microsoft security support environments.
• Exposure to MDE, MDCA, and Microsoft Purview go-live, hypercare, or warranty support activities.
• Exposure to regulated enterprise environments is advantageous.
• Experience working with client-facing support teams, SOC teams, endpoint teams, compliance teams, and managed support processes is beneficial.