Endpoint Security Operations Engineer (L2) – Microsoft Defender at gruvegruve · India (Remote)

Workplace: Remote

Posted: 2026-11-05

About Gruve Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks. Position summary: We are looking for a skilled L2 System Administrator to support Microsoft Defender security operations across enterprise endpoints and infrastructure. The role is responsible for investigating security alerts, analyzing endpoint threats, troubleshooting defender agen t and policy issues, supporting incident containment and remediation, and maintaining security compliance. The administrator will work closely with L1 operations, L3 Security SMEs, SOC, Endpoint, Identity and Infrastructure teams to ensure effective threat response and SLA compliance. Key Responsibilities: Microsoft Defender Operations Provide L2 support for Microsoft Defender alerts, incidents and service requests. Investigate endpoint detection alerts, malware detections, suspicious activities and security incidents using Microsoft Defender for Endpoint. Analyze device timelines, alert evidence, process activity and investigation data to determine incident scope. Troubleshoot Defender sensor health, onboarding, connectivity, policy application and reporting issues. Support approved threat containment and remediation activities, including device isolation and threat remediation. Investigate antivirus detection, scan failures, signature updates and endpoint protection configuration issues. Monitor endpoint protection status and coordinate remediation of Defender health and compliance gaps. Security Incident Response & Remediation Investigate escalated security alerts and determine appropriate resp…Sign in to see the original postingBrowse more developer jobs on RoleBurst