... Defender, Cortex XDR, or CrowdStrike, and governance, risk, or compliance work using established frameworks; Palo Alto Networks PCNSE, Certified Cybersecurity Associate, or equivalent cybersecurity ...
... Defender, Cortex XDR, or CrowdStrike, and governance, risk, or compliance work using established frameworks; Palo Alto Networks PCNSE, Certified Cybersecurity Associate, or equivalent cybersecurity ...
IT Security Ops Manager
Ann Arbor, MI · On-site
Responsibilities : • Own and manage enterprise endpoint security platforms including EDR/XDR ... SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Carbon Black; DLP: Forcepoint ...
IT Security Ops Manager
Ann Arbor, MI · On-site
Responsibilities : • Own and manage enterprise endpoint security platforms including EDR/XDR ... SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Carbon Black; DLP: Forcepoint ...
IT Security Ops Manager
Ann Arbor, MI · On-site
Responsibilities : • Own and manage enterprise endpoint security platforms including EDR/XDR ... SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Carbon Black; DLP: Forcepoint ...
IT Security Ops Manager
Ann Arbor, MI · On-site
Responsibilities : • Own and manage enterprise endpoint security platforms including EDR/XDR ... SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Carbon Black; DLP: Forcepoint ...
IT Network Manager - Endpoint Security
Ann Arbor, MI · On-site
$114.10 - $194/hr
EDR/XDR, endpoint protection, device control, DLP and endpoint privilege management agents**.* Lead ... SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Carbon Black + DLP: Forcepoint ...
IT Network Manager - Endpoint Security
Ann Arbor, MI · On-site
$114.10 - $194/hr
EDR/XDR, endpoint protection, device control, DLP and endpoint privilege management agents**.* Lead ... SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Carbon Black + DLP: Forcepoint ...
IT Cybersecurity Operations Manager
Ann Arbor, MI · On-site
$114K - $194K/yr
Own and manage enterprise endpoint security platforms including EDR/XDR, endpoint protection ... SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Carbon Black * DLP: Forcepoint ...
IT Cybersecurity Operations Manager
Ann Arbor, MI · On-site
$114K - $194K/yr
Own and manage enterprise endpoint security platforms including EDR/XDR, endpoint protection ... SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Carbon Black * DLP: Forcepoint ...
IT Cybersecurity Operations Manager
Ann Arbor, MI · On-site
$114K - $194K/yr
Own and manage enterprise endpoint security platforms including EDR/XDR, endpoint protection ... SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Carbon Black * DLP: Forcepoint ...
IT Cybersecurity Operations Manager
Ann Arbor, MI · On-site
$114K - $194K/yr
Own and manage enterprise endpoint security platforms including EDR/XDR, endpoint protection ... SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Carbon Black * DLP: Forcepoint ...
IT Cybersecurity Operations Manager
Ann Arbor, MI · On-site
$114K - $194K/yr
Own and manage enterprise endpoint security platforms including EDR/XDR, endpoint protection ... SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Carbon Black * DLP: Forcepoint ...
IT Cybersecurity Operations Manager
Ann Arbor, MI · On-site
$114K - $194K/yr
Own and manage enterprise endpoint security platforms including EDR/XDR, endpoint protection ... SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Carbon Black * DLP: Forcepoint ...
IT Cybersecurity Operations Manager
$114K - $194K/yr
Own and manage enterprise endpoint security platforms including EDR/XDR, endpoint protection ... SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Carbon Black * DLP: Forcepoint ...
IT Cybersecurity Operations Manager
$114K - $194K/yr
Own and manage enterprise endpoint security platforms including EDR/XDR, endpoint protection ... SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Carbon Black * DLP: Forcepoint ...
Defender Xdr information
What is Defender XDR?
Defender XDR (Extended Detection and Response) is a cybersecurity solution provided by Microsoft that integrates and automates threat detection, investigation, and response across multiple security domains such as endpoints, identities, email, and cloud applications. It provides a unified platform to help security teams identify and respond to sophisticated cyber threats more efficiently. By correlating data and alerts from various sources, Defender XDR enables organizations to detect complex attacks, reduce response times, and improve overall security posture.
What are the key skills and qualifications needed to thrive as a Defender XDR specialist?
To excel as a Defender XDR Specialist, you need a solid understanding of cybersecurity principles, threat detection, and incident response, often supported by certifications like CompTIA Security+ or Microsoft Certified: Security Operations Analyst Associate. Familiarity with Microsoft Defender XDR, SIEM tools, and other security platforms is crucial for monitoring and analyzing threats. Strong analytical thinking, attention to detail, and effective communication skills help you interpret complex security data and collaborate with IT teams. These skills are essential for proactively identifying and mitigating cyber threats, ensuring robust organizational security.
What are some common challenges faced by professionals working with Microsoft Defender XDR, and how can they be addressed?
Professionals working with Microsoft Defender XDR often encounter challenges such as integrating multiple security tools, managing a high volume of alerts, and staying updated with evolving threats. To address these, it's important to develop a strong understanding of the XDR platform, establish clear incident response processes, and leverage automation features to reduce manual workloads. Collaboration with IT, security, and compliance teams is also key to maintaining a cohesive security posture and ensuring timely resolution of incidents.
What is the difference between Defender Xdr vs Security Analyst?
| Aspect | Defender Xdr | Security Analyst |
|---|---|---|
| Certifications | CompTIA Security+, CISSP, CEH | CompTIA Security+, CISSP, CEH |
| Work Environment | Security tools, incident response, threat detection | Monitoring, analyzing security data, incident investigation |
| Employer & Industry Usage | Cybersecurity teams, IT departments | Security teams, IT departments, consulting firms |
While both Defender Xdr and Security Analysts work in cybersecurity, Defender Xdr focuses on deploying and managing extended detection and response tools, whereas Security Analysts analyze security data and respond to incidents. Defender Xdr specialists often implement and configure security solutions, while Security Analysts interpret alerts and investigate threats. Both roles require similar certifications and work environments, but their core responsibilities differ in focus and scope.
What are popular job titles related to Defender Xdr jobs in Michigan?
For Defender Xdr jobs in Michigan, the most frequently searched job titles are:
What job categories do people searching Defender Xdr jobs in Michigan look for?
The top searched job categories for Defender Xdr jobs in Michigan are:
What cities in Michigan are hiring for Defender Xdr jobs?
Cities in Michigan with the most Defender Xdr job openings:
Deloitte rating
8.2
Based on 93 frontline employees who took The Breakroom Quiz
45th of 151 rated financial services
Job description
Our Deloitte Cyber team understands the evolving challenges and opportunities organizations face in cybersecurity. Join our Cyber practice to help clients navigate a dynamic threat landscape through solutions and managed services that simplify complexity and strengthen resilience. In this role, you will support Next-Generation Security Operations Center (SOC) capabilities, including platforms such as Cortex XSIAM, to help clients operate with confidence and proactively manage cyber risk.
Recruiting for this role ends on 12/31/2026.
Work you'll do
As a Palo Alto SecOps, Senior Consultant on the Cyber Defense & Resilience team, you will be responsible for:
- Leading the design and deployment of Next-Generation SOC platforms, including Cortex XSIAM, advanced detection rules, security information and event management (SIEM) ingestion, and security orchestration, automation, and response (SOAR) playbooks
- Integrating log and telemetry sources to support data quality, normalization, and operational visibility
- Developing and optimizing automated response workflows for incident containment and remediation
- Advising clients on threat detection use cases, automation strategies, and SOC platform capabilities
- Collaborating with cross-functional teams to enhance solutions, incorporate threat intelligence, and present findings and recommendations to client stakeholders
A successful candidate would possess these skills:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
The team
Our Cyber Defense & Resilience offering helps clients defend against advanced threats by transforming security operations through monitoring technologies, data analytics, and threat intelligence. The team helps organizations manage dynamic attack surfaces and respond to cyber incidents and business disruptions with greater speed and consistency. Through this work, we help clients prepare for, respond to, and recover from cyber events.
Qualifications
Required:
- Bachelor's degree in Computer Science, Cybersecurity, or another technical field
- 4+ years of experience in cloud, network, or identity security, including 3+ years working with Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure, and native security tools
- 3+ years of experience with Security Operations tools and platforms, including Cortex XSIAM, Cortex XDR, Splunk, or similar security information and event management (SIEM) technologies
- 3+ years of Security Operations Center experience in detection engineering, automation and playbook development, SOC maturity, log source management, data normalization, data ingestion, and data manipulation
- 3+ years of experience with endpoint detection and response (EDR) platforms such as Microsoft Defender, Cortex XDR, or CrowdStrike, and governance, risk, or compliance work using established frameworks; Palo Alto Networks PCNSE, Certified Cybersecurity Associate, or equivalent cybersecurity certification
- Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
- Limited immigration sponsorship may be available.
Preferred:
- Experience with Palo Alto Networks solutions, including next-generation firewalls, Cortex, Prisma Cloud, Prisma Access, and XDR
- Experience evaluating differences among Security Operations vendor platforms and SIEM technologies
- Experience with scripting and playbook development in a SIEM, SOAR, or security platform
- Experience with Border Gateway Protocol (BGP), equal-cost multi-path routing (ECMP), and network segmentation in on-premise and cloud environments
- Experience advising on solution design based on client use cases, requirements, and success criteria
- Previous consulting experience and/or advanced cybersecurity or network engineering certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Certified Cloud Security Professional (CCSP)
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $105,400 to $207,800.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Our Deloitte Cyber team understands the evolving challenges and opportunities organizations face in cybersecurity. Join our Cyber practice to help clients navigate a dynamic threat landscape through solutions and managed services that simplify complexity and strengthen resilience. In this role, you will support Next-Generation Security Operations Center (SOC) capabilities, including platforms such as Cortex XSIAM, to help clients operate with confidence and proactively manage cyber risk.
Recruiting for this role ends on 12/31/2026.
Work you'll do
As a Palo Alto SecOps, Senior Consultant on the Cyber Defense & Resilience team, you will be responsible for:
- Leading the design and deployment of Next-Generation SOC platforms, including Cortex XSIAM, advanced detection rules, security information and event management (SIEM) ingestion, and security orchestration, automation, and response (SOAR) playbooks
- Integrating log and telemetry sources to support data quality, normalization, and operational visibility
- Developing and optimizing automated response workflows for incident containment and remediation
- Advising clients on threat detection use cases, automation strategies, and SOC platform capabilities
- Collaborating with cross-functional teams to enhance solutions, incorporate threat intelligence, and present findings and recommendations to client stakeholders
A successful candidate would possess these skills:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
The team
Our Cyber Defense & Resilience offering helps clients defend against advanced threats by transforming security operations through monitoring technologies, data analytics, and threat intelligence. The team helps organizations manage dynamic attack surfaces and respond to cyber incidents and business disruptions with greater speed and consistency. Through this work, we help clients prepare for, respond to, and recover from cyber events.
Qualifications
Required:
- Bachelor's degree in Computer Science, Cybersecurity, or another technical field
- 4+ years of experience in cloud, network, or identity security, including 3+ years working with Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure, and native security tools
- 3+ years of experience with Security Operations tools and platforms, including Cortex XSIAM, Cortex XDR, Splunk, or similar security information and event management (SIEM) technologies
- 3+ years of Security Operations Center experience in detection engineering, automation and playbook development, SOC maturity, log source management, data normalization, data ingestion, and data manipulation
- 3+ years of experience with endpoint detection and response (EDR) platforms such as Microsoft Defender, Cortex XDR, or CrowdStrike, and governance, risk, or compliance work using established frameworks; Palo Alto Networks PCNSE, Certified Cybersecurity Associate, or equivalent cybersecurity certification
- Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
- Limited immigration sponsorship may be available.
Preferred:
- Experience with Palo Alto Networks solutions, including next-generation firewalls, Cortex, Prisma Cloud, Prisma Access, and XDR
- Experience evaluating differences among Security Operations vendor platforms and SIEM technologies
- Experience with scripting and playbook development in a SIEM, SOAR, or security platform
- Experience with Border Gateway Protocol (BGP), equal-cost multi-path routing (ECMP), and network segmentation in on-premise and cloud environments
- Experience advising on solution design based on client use cases, requirements, and success criteria
- Previous consulting experience and/or advanced cybersecurity or network engineering certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Certified Cloud Security Professional (CCSP)
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $105,400 to $207,800.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
About Deloitte
Sourced by ZipRecruiter
Industry
Finance and insurance and business management consulting
Company size
10,000+ Employees
Headquarters location
Orlando, FL, US