ZipRecruiter

Log In

1

Defender Xdr Jobs in Michigan (NOW HIRING)

BeneSys

Cybersecurity Engineer (Troy, MI)

Troy, MI · On-site

Design, implement, and continuously improve security controls across Microsoft Entra ID, Conditional Access, Microsoft Defender XDR, Microsoft Defender for Endpoint, Microsoft Defender for Identity ...

UFP Industries

Lead SOC Analyst

Grand Rapids, MI · On-site

Preferred : • Experience with Splunk, Microsoft Sentinel, Defender XDR, and/or similar platforms. • Experience working in a hybrid SOC model (internal + MDR). • Familiarity with compliance ...

UFP Industries

Lead SOC Analyst

Grand Rapids, MI

Experience with Splunk, Microsoft Sentinel, Defender XDR, and/or similar platforms. * Experience working in a hybrid SOC model (internal + MDR). * Familiarity with compliance frameworks (e.g., NIST ...

UFP Industries, Inc.

Lead SOC Analyst

Grand Rapids, MI · On-site

$90 - $120/hr

Experience with Splunk, Microsoft Sentinel, Defender XDR, and/or similar platforms. * Experience working in a hybrid SOC model (internal + MDR). * Familiarity with compliance frameworks (e.g., NIST ...

UFP Industries

Lead SOC Analyst

Grand Rapids, MI · On-site

Experience with Splunk, Microsoft Sentinel, Defender XDR, and/or similar platforms. * Experience working in a hybrid SOC model (internal + MDR). * Familiarity with compliance frameworks (e.g., NIST ...

Deloitte

Cloud Security Senior Consultant - M365

Detroit, MI · On-site

$58 - $79/hr

Purview, Intune, Sentinel, Security Copilot, Entra ID, Defender for Office, Defender for Endpoints and Servers, Defender for Vulnerabilities, Defender for Cloud Apps, Defender XDR and SCCM * Conduct ...

FastTek

IT Security Analyst

Troy, MI

Proactively hunt for threats across the environment using tools like Microsoft Defender XDR. * Develop and implement strategies to defend against prevalent malware types (e.g., ransomware, spyware ...

thyssenkrupp

Security Architect

Southfield, MI · On-site

$59.75 - $77/hr

Microsoft Sentinel, Defender XDR, automation and incident response * Compliance: CMMC 2.0, NIST 800-171/172, ITAR, risk management Benefits Overview We offer competitive company benefits to eligible ...

ThyssenKrupp

Security

Southfield, MI · On-site

$60 - $77.50/hr

Microsoft Sentinel, Defender XDR, automation and incident response * Compliance: CMMC 2.0, NIST 800-171/172, ITAR, risk management Benefits Overview We offer competitive company benefits to eligible ...

KLA

IT Security Ops Manager

Ann Arbor, MI · On-site

Responsibilities : • Own and manage enterprise endpoint security platforms including EDR/XDR ... SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Carbon Black; DLP: Forcepoint ...

KLA

IT Security Ops Manager

Ann Arbor, MI · On-site

Responsibilities : • Own and manage enterprise endpoint security platforms including EDR/XDR ... SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Carbon Black; DLP: Forcepoint ...

next page

Showing results 1-20

All JobsDefender Xdr JobsDefender Xdr Jobs in Michigan

Defender Xdr information

What is Defender XDR?

Defender XDR (Extended Detection and Response) is a cybersecurity solution provided by Microsoft that integrates and automates threat detection, investigation, and response across multiple security domains such as endpoints, identities, email, and cloud applications. It provides a unified platform to help security teams identify and respond to sophisticated cyber threats more efficiently. By correlating data and alerts from various sources, Defender XDR enables organizations to detect complex attacks, reduce response times, and improve overall security posture.

What is the difference between Defender Xdr vs Security Analyst?

AspectDefender XdrSecurity Analyst
CertificationsCompTIA Security+, CISSP, CEHCompTIA Security+, CISSP, CEH
Work EnvironmentSecurity tools, incident response, threat detectionMonitoring, analyzing security data, incident investigation
Employer & Industry UsageCybersecurity teams, IT departmentsSecurity teams, IT departments, consulting firms

While both Defender Xdr and Security Analysts work in cybersecurity, Defender Xdr focuses on deploying and managing extended detection and response tools, whereas Security Analysts analyze security data and respond to incidents. Defender Xdr specialists often implement and configure security solutions, while Security Analysts interpret alerts and investigate threats. Both roles require similar certifications and work environments, but their core responsibilities differ in focus and scope.

What are the key skills and qualifications needed to thrive as a Defender XDR specialist?

To excel as a Defender XDR Specialist, you need a solid understanding of cybersecurity principles, threat detection, and incident response, often supported by certifications like CompTIA Security+ or Microsoft Certified: Security Operations Analyst Associate. Familiarity with Microsoft Defender XDR, SIEM tools, and other security platforms is crucial for monitoring and analyzing threats. Strong analytical thinking, attention to detail, and effective communication skills help you interpret complex security data and collaborate with IT teams. These skills are essential for proactively identifying and mitigating cyber threats, ensuring robust organizational security.

What are some common challenges faced by professionals working with Microsoft Defender XDR, and how can they be addressed?

Professionals working with Microsoft Defender XDR often encounter challenges such as integrating multiple security tools, managing a high volume of alerts, and staying updated with evolving threats. To address these, it's important to develop a strong understanding of the XDR platform, establish clear incident response processes, and leverage automation features to reduce manual workloads. Collaboration with IT, security, and compliance teams is also key to maintaining a cohesive security posture and ensuring timely resolution of incidents.
What are popular job titles related to Defender Xdr jobs in Michigan? For Defender Xdr jobs in Michigan, the most frequently searched job titles are:
What job categories do people searching Defender Xdr jobs in Michigan look for? The top searched job categories for Defender Xdr jobs in Michigan are:
What cities in Michigan are hiring for Defender Xdr jobs? Cities in Michigan with the most Defender Xdr job openings:
Defender Xdr jobs near you

Cybersecurity Engineer (Troy, MI)

BeneSys, Inc.

Troy, MI

Full-time

Medical, Dental, Vision, Retirement, PTO

Posted 18 days ago

BeneSys rating

7.8

Company rating: 7.8 out of 10

Based on 11 frontline employees who took The Breakroom Quiz

150th of 483 rated business services

Job description

Cybersecurity Engineer (Troy, MI)
Job Summary
The Cybersecurity Engineer is responsible for implementing, maintaining, and continuously improving the organization's cybersecurity technologies, processes, and controls. This role investigates and remediates security threats, supports incident response activities, strengthens security posture across on-premises and cloud environments, and collaborates closely with IT Infrastructure and Compliance teams to protect BeneSys systems and data.
The Cybersecurity Department is a growing team focused on continuously maturing the organization's security program. As security standards and technologies evolve, the Cybersecurity Engineer must be adaptable, self-motivated, and capable of delivering results in a fast-paced environment while maintaining a collaborative approach. This position is expected to demonstrate professionalism, technical excellence, and sound judgment in representing both the department and BeneSys.
BeneSys maintains a substantial hybrid infrastructure consisting of on-premises and cloud-based systems that support the organization's Cybersecurity and IT Compliance programs. This position primarily requires onsite work, with occasional travel to company locations as business needs require.
Applicant must live in the Metro Detroit area of Michigan.
Essential Functions
  • Monitor, investigate, triage, and respond to alerts generated by enterprise security platforms, including:
    • Endpoint Detection and Response (EDR)
    • Extended Detection and Response (XDR)
    • Security Information and Event Management (SIEM)
    • Vulnerability management platforms
  • Email security systems (malware, phishing, spam, blacklisting, and relay protection)
  • External breach notifications and threat intelligence
  • Deploy, configure, maintain, upgrade, and decommission cybersecurity software, hardware, and security appliances in collaboration with the IT Infrastructure team.
  • Continuously optimize existing security tools and configurations to improve detection capabilities, align with industry best practices, and support business requirements.
  • Assist with secure integration of third-party applications and services, including Single Sign-On (SSO), OAuth, and Microsoft Entra ID identity services.
  • Design, implement, and continuously improve security controls across Microsoft Entra ID, Conditional Access, Microsoft Defender XDR, Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Cloud, and Microsoft Defender for Cloud Apps.
  • Administer and continuously enhance the organization's SIEM platform by developing analytics rules, dashboards, workbooks, data connectors, and monitoring content to improve visibility and detection fidelity.
  • Develop and maintain Kusto Query Language (KQL) detection libraries, threat hunting queries, automation workflows, Logic Apps, playbooks, and other SOAR capabilities.
  • Deploy and maintain endpoint security technologies, including Managed Detection and Response (MDR) solutions.
  • Perform vulnerability assessments, prioritize remediation efforts, and coordinate corrective actions with the IT Infrastructure team.
  • Support internal and external compliance initiatives, including security audits, penetration testing, risk assessments, and regulatory reviews.
  • Investigate, document, and report cybersecurity incidents, including root cause analysis, impact assessments, and remediation activities.
  • Assist in developing, maintaining, and improving cybersecurity policies, standards, procedures, and technical documentation.
  • Research emerging cybersecurity threats, vulnerabilities, technologies, and industry trends, providing recommendations for improving the organization's security posture.
  • Participate in security awareness training and provide technical guidance to IT staff and end users as needed.
  • Maintain accurate operational documentation, security metrics, support logs, and incident records.
  • Communicate project status, security incidents, operational metrics, and remediation progress to the Manager of Cybersecurity in a timely and professional manner.
  • Demonstrate regular attendance, professionalism, accountability, and compliance with all company policies, procedures, and security standards.
  • Regular and predictable attendance is an essential function of this job.
Qualifications
  • Required Experience
    • Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field, or equivalent professional experience.
    • Minimum of four (4) years of progressively responsible experience in cybersecurity, including Security Operations Center (SOC), Incident Response, Threat Hunting, Security Engineering, or similar roles.
    • Minimum of one (1) year of experience supporting enterprise IT infrastructure, such as Service Desk, Systems Administration, or Infrastructure Engineering.
    • Minimum of two (2) years of hands-on experience administering Microsoft Defender XDR and Microsoft Sentinel.
  • Technical Knowledge
    • Strong understanding of cybersecurity threats, attacker tactics, techniques, and procedures (TTPs).
    • Experience with incident response methodologies and security operations.
    • Experience securing hybrid cloud, cloud-native, and on-premises enterprise environments.
    • Working knowledge of cybersecurity frameworks and regulatory standards, including NIST, ISO 27001, CIS Controls, HIPAA, HITRUST, and COBIT.
    • Strong PowerShell scripting skills and experience using Python (preferred) or another general-purpose programming language for automation, threat detection, and response.
    • Experience with Kusto Query Language (KQL) for Microsoft Sentinel and Microsoft Defender.
    • Experience with Microsoft Active Directory, Microsoft Entra ID, Windows Server, Group Policy, and enterprise identity management.
    • Familiarity with endpoint management technologies, including MDM, MAM, and Microsoft Intune.
    • Working knowledge of firewalls, IDS/IPS technologies, encryption, authentication, and identity security.
    • Excellent troubleshooting, analytical, and problem-solving skills.
    • Professional Competencies
    • Self-motivated with the ability to work independently while contributing effectively within a collaborative team.
    • Strong verbal and written communication skills with the ability to explain technical concepts clearly to both technical and non-technical audiences.
    • Demonstrated ability to manage multiple priorities and adapt quickly to changing business needs.
    • Strong organizational skills and attention to detail.
    • Ability to summarize incidents, projects, risks, and technical findings in a concise and meaningful manner.
    • Commitment to continuous learning and professional development.
    • Demonstrates professionalism, accountability, reliability, punctuality, and proactive communication.
Work Schedule - Full time. Monday - Friday, 7:30am - 4:30 pm. Requires in-office days but also offers at-home flexibility after 90 days.
Competitive Benefits and Compensation Package
  • 12 paid holidays
    • Paid Time Off (PTO)
    • Pro-rated during first year of employment
  • 15 days of PTO provided in the next calendar year!
  • 3 days paid bereavement
  • Up to 20 days paid jury leave
  • Medical, dental, and vision insurance, with option for dependent coverage
  • Company-paid basic life, short-term disability, long-term disability, and AD amp;D insurance
  • 401k with employer match
  • Tuition reimbursement program
  • Career development opportunities
  • Referral bonus for all successful full-time referrals
  • Annual opportunities for increases
Pay - The salary range for this position is $90,000 - $100,000 per year. Actual salary is dependent on skills, experience, education, and other business factors.
Our Culture
BeneSys wants to be a great service provider to the members we serve, and we recognize we can only do that if we are also a great employer with successful employees. In short, our success is driven by our employees' successes. We want to be a place where people want to work, feel proud of what they do and feel fulfilled both professionally and personally. We want to create a place where employees can find long-term growth and potential.
Our culture focuses on three core values:
  • Collaboration: working together across 31 locations to achieve the best for the company and our clients
  • Dedication: striving to create an environment where all employees work toward a common goal while committing to providing the best customer service to our members and our colleagues
  • Integrity: doing what we say we will do. Upholding strong ethical and moral principles
ADA amp; EEO
Reasonable accommodations will be made so that qualified individuals with disabilities are able to complete the application process and, if hired, fulfill the essential functions of their job.

What BeneSys employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

BeneSys logo

About BeneSys

Sourced by ZipRecruiter

Industry

Insurance and employee benefit funds

Company size

501 - 1,000 Employees

Headquarters location

Troy, MI, US

Year founded

1979

View All BeneSys Jobs

Apply