ZipRecruiter

Log In

2

Remote Microsoft Defender Jobs in Reston, VA (NOW HIRING)

Eliassen Group

SOC Analyst

Washington, DC · Remote

$50 - $55/hr

Hybrid 2 Days Onsite/3 Days Remote in Washington, DC Our client seeks a SOC Analyst to support ... Analyze alerts from EDR/XDR solutions such as Microsoft Defender. * Monitor identity-related risks ...

Swish Data

Be Seen First

Cyber Security Engineer V

Mclean, VA · Remote

$205K - $230K/yr

Endpoint Detection and Response (EDR) platforms (e.g., Microsoft Defender for Endpoint, CrowdStrike ... hybrid, or remote environments depending on contract requirements. Occasional travel may be ...

ManTech

Senior Cloud Engineer

Chantilly, VA · Remote

$114K - $190K/yr

... Microsoft Defender, and Microsoft Sentinel to ensure compliance * Writing and maintaining ... For Remote Opportunities), education and certifications as well as Federal Government Contract ...

next page

Showing results 1-20

All JobsRemote Microsoft Defender JobsRemote Microsoft Defender Jobs in Reston, VA

Remote Microsoft Defender information

See Reston, VA salary details

$30.7K

$104.7K

$201.3K

How much do remote microsoft defender jobs pay per year?

As of Jul 6, 2026, the average yearly pay for remote microsoft defender in Reston, VA is $104,736.00, according to ZipRecruiter salary data. Most workers in this role earn between $70,200.00 and $130,000.00 per year, depending on experience, location, and employer.

What is a Remote Microsoft Defender job?

A Remote Microsoft Defender job typically involves working with Microsoft's security solutions, such as Microsoft Defender for Endpoint, to protect organizations from cyber threats. Professionals in this role monitor security alerts, investigate incidents, and implement threat prevention measures while working remotely. They may also provide guidance on best practices, configure security policies, and ensure compliance with organizational standards. This position requires strong knowledge of cybersecurity, Microsoft products, and remote collaboration tools.

What are the key skills and qualifications needed to thrive as a Remote Microsoft Defender specialist, and why are they important?

To excel as a Remote Microsoft Defender specialist, you need a strong background in cybersecurity, threat analysis, and endpoint protection, typically supported by relevant IT degrees and certifications like Microsoft Certified: Security Operations Analyst Associate. Familiarity with Microsoft Defender suite, Azure Security Center, SIEM tools, and incident response platforms is essential. Strong problem-solving, communication, and analytical skills help you effectively identify and respond to security threats while collaborating with remote teams. These competencies are crucial for proactively mitigating risks and maintaining robust security across distributed environments.

How does a Remote Microsoft Defender specialist typically collaborate with IT and security teams across different locations?

A Remote Microsoft Defender specialist works closely with both centralized and distributed IT and cybersecurity teams to monitor, analyze, and respond to potential threats. Collaboration often involves daily virtual meetings, shared dashboards, and ticketing systems to coordinate incident responses and ensure consistent security practices across the organization. Regular communication is key, as specialists must provide timely updates, share findings, and recommend actions to minimize risks. This remote structure requires strong documentation skills and the ability to work independently while remaining highly responsive to team needs.

What is the difference between Remote Microsoft Defender vs Remote Security Analyst?

AspectRemote Microsoft DefenderRemote Security Analyst
CertificationsMicrosoft Certified: Security, Compliance, and Identity Fundamentals, Microsoft Certified: Security Operations Analyst AssociateCompTIA Security+, CISSP, GIAC Security Essentials
Work EnvironmentPrimarily focused on managing Microsoft security tools and cloud security within Microsoft ecosystemsBroader security monitoring, incident response, and risk assessment across various platforms
Industry UsageUsed mainly in organizations leveraging Microsoft products and cloud servicesUsed across diverse industries requiring security monitoring and threat analysis

Remote Microsoft Defender roles focus on managing Microsoft security solutions, while Remote Security Analysts perform broader security monitoring and incident response across multiple platforms. Both roles require security certifications but differ in scope and tools used.

What job categories do people searching Remote Microsoft Defender jobs in Reston, VA look for? The top searched job categories for Remote Microsoft Defender jobs in Reston, VA are:
What cities near Reston, VA are hiring for Remote Microsoft Defender jobs? Cities near Reston, VA with the most Remote Microsoft Defender job openings:
Remote Microsoft Defender jobs near you
Cloud Incident Response Training- Contract Instructors (Remote)

Cloud Incident Response Training- Contract Instructors (Remote)

Cybervance

Kensington, MD • Remote

Contractor

Posted 19 days ago

Job description

Cloud Instructors for Cloud Incident Response Training (1099)Location: Kensington, MD Remote | 1099 Contract PositionDuration: Project based (Course specific engagements)

General Description

We are looking for experienced instructors to deliver a series of virtual Cloud Incident Response (IR) courses designed for SOC analysts, incident responders, and security professionals transitioning to or specializing in cloud security. These courses span foundational, intermediate, and advanced levels, with a focus on Microsoft Azure tools, methodologies, and practical applications for incident response and forensics.

Responsibilities

As a contract instructor, you will:

Deliver live virtual training that explores the differences between cloud and on-premises incident response, ensuring participants understand the Shared Responsibility Model and its implications for security investigations.

Teach participants to analyze Azure core functions, including virtual machines (VMs), storage, networking, and Identity Access Management (IAM), and guide them in navigating Azure logging sources and log types.

Provide hands-on instruction on configuring and utilizing tools like PowerShell modules, Microsoft Defender Suite, and Microsoft Sentinel for security orchestration, automation, and response (SOAR).

Help students investigate and mitigate threats by teaching detection of common Azure attack patterns (e.g., password spraying, lateral movement, data exfiltration) and conducting threat hunting using Kusto Query Language (KQL).

Guide advanced students in performing in-depth virtual machine forensics in Azure, including introductory memory analysis, while addressing challenges in forensic analysis of serverless functions and containers.

Support proactive defense strategies by teaching Azure-specific playbook creation, threat modeling, and leveraging cloud-native tools for artifact collection, automation, and advanced detection.

Facilitate labs and exercises that allow participants to apply new skills in realistic scenarios, such as configuring Microsoft Sentinel, integrating threat intelligence, and mapping security controls to frameworks like MITRE ATT&CK.

Create an engaging and interactive learning environment, answering participant questions and ensuring key objectives are met.

Qualifications

Required:

Proven expertise in cloud incident response, with a focus on Microsoft Azure security tools and frameworks.

Prior experience teaching technical content to security professionals, preferably in virtual environments.

In-depth understanding of Azure architecture, logging sources, PowerShell, Microsoft Defender Suite, Sentinel, and SOAR.

Knowledge of threat hunting, advanced log analysis, and cloud-specific attack patterns.

Preferred:

Relevant certifications (e.g., Azure Security Engineer, Azure Administrator, CISSP, GCFA, GCIH).

Familiarity with conducting forensic analysis of virtual machines, containers, and serverless functions in Azure.

Experience designing and delivering incident response playbooks and cloud automation workflows

Required:

Proven expertise in cloud incident response, with a focus on Microsoft Azure security tools and frameworks.

Prior experience teaching technical content to security professionals, preferably in virtual environments.

In-depth understanding of Azure architecture, logging sources, PowerShell, Microsoft Defender Suite, Sentinel, and SOAR.

Knowledge of threat hunting, advanced log analysis, and cloud-specific attack patterns.

Preferred:

Relevant certifications (e.g., Azure Security Engineer, Azure Administrator, CISSP, GCFA, GCIH).

Familiarity with conducting forensic analysis of virtual machines, containers, and serverless functions in Azure.

Experience designing and delivering incident response playbooks and cloud automation workflows

Cybervance is an equal opportunity employer. All qualified applicants are considered for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other category protected by applicable federal, state, or local laws.