CodeHQ

Core technical skills

• Microsoft 365 & Microsoft Defender
• Security alert monitoring, incident investigation and remediation
• Entra ID, Conditional Access
• Active Directory, DNS, DHCP & Group Policy
• Scripting and automation

Day-to-day responsibilities

• Monitor the Microsoft Defender portal (Defender XDR) daily
• Review incidents, alerts, and security risks
• Triage alerts from:
  • Defender for Endpoint
  • Defender for Office 365
  • Defender for Identity
  • Microsoft Defender for Cloud Apps
• Investigate security incidents
• Identify the scope, impact, and root cause of incidents
• Perform remediation actions such as:
  • device isolation
  • containment actions
  • user or session risk remediation
  • email threat remediation, including quarantine and purge actions
  • policy tuning to reduce false positives
• Review Secure Score and Exposure Score
• Identify and prioritise security improvement actions
• Track remediation progress with stakeholders
• Support threat hunting and proactive risk identification
• Use Defender tools and advanced queries where required
• Follow security playbooks and escalation procedures
• Maintain clear records of incidents, investigation notes, and remediation actions
• Work directly with stakeholders to escalate risks and support response activities
• Provide recommendations to improve overall security posture

Preferred skills and qualifications

• Relevant Microsoft certifications
• Experience with Hyper-V virtualisation
• Ability to support virtual environment design and deployment
• Ability to build and maintain strong relationships with customers, partners, and vendors
• Skills in Power Automate

Essential soft skills and experience

• Strong English communication skills, both spoken and written (IELTS certification is preferred)
• A team player with a positive attitude and professional approach
• 5+ years of hands-on experience in customer-facing environments
• Experience working with overseas customers