EndPoint Security Subject Matter Expert

Job Description:

DXC Technology - where brilliant people embrace change and seize opportunities to advance their careers and amplify customer success. People are the heart of our business. We support each other and work as a team, globally and locally to deliver excellence for our customers and colleagues. We live in more than 70 countries, speak multiple languages and work with over 6,000 customers on almost every continent. We use the power of technology to deliver mission critical IT services that move the world. DXC.com At DXC we pride ourselves on delivering excellence in everything we do. What this means for you is the opportunity to be a part of delivering innovative solutions and helping to solve real business problems for a wide variety of valued clients.

Role Summary

The Endpoint Security Subject Matter Expert is responsible for strengthening and managing enterprise‑grade endpoint protection by leading the deployment and optimization of Microsoft Defender XDR and Defender for Cloud, implementing application control through platforms such as ThreatLocker, and maintaining endpoint governance via Intune, GPO, MECM, and Entra ID.

The role ensures secure device configuration, threat detection, identity‑driven access, and data protection using Microsoft Purview, while also supporting OT/ICS endpoint visibility where required.

The SME collaborates closely with SOC, Cloud, Identity, and Infrastructure teams, serving as an escalation point for endpoint‑security issues, contributing to process improvements, and troubleshooting endpoint‑level incidents.

Job Description:

• Lead deployment, configuration, and optimization of Microsoft Defender XDR, ensuring strong endpoint protection, threat detection, device hardening, and integration across the Microsoft security ecosystem.
• Administer and maintain Microsoft Defender for Cloud, including security recommendations, posture management, and hybrid/cloud workload protection.
• Manage and maintain ThreatLocker or other application‑control platforms, including allowlisting, policy enforcement, ringfencing, and operational troubleshooting.
• Implement and optimize endpoint governance using Microsoft Intune, including configuration profiles, compliance policies, security baselines, and device‑lifecycle management.
• Support directory, identity, and device policy integration using Entra ID (Azure AD), ensuring secure authentication, conditional access, and identity‑driven device posture.
• Apply and tune Group Policy Objects (GPO) and MECM (Microsoft Endpoint Configuration Manager) for on‑premises and hybrid Windows endpoint management.
• Support and maintain Microsoft Purview solutions, including Information Protection, DLP, Insider Risk, and Data Governance; to strengthen endpoint‑level data protection.
• Assist in basic integration and monitoring of Nozomi OT or other OT/ICS endpoint‑visibility tools to expand security coverage beyond IT environments.
• Monitor endpoint‑related alerts, investigate incidents, and collaborate with SOC, Cloud, and Infrastructure teams to drive remediation activities.
• Conduct endpoint‑level troubleshooting using built‑in Microsoft tools, event logs, and device‑health telemetry to resolve issues around policy enforcement, protection status, or application behavior.
• Document endpoint configurations, baselines, and policy changes, and support operational handover after deployment or major updates.
• Apply deep subject‑matter expertise across endpoint protection, application control, and Microsoft‑based endpoint governance
• Work independently on moderately complex to advanced endpoint‑security initiatives.
• Collaborate closely with SOC, Cloud Security, Identity, and Infrastructure teams to ensure consistent endpoint security posture.
• Contribute to documentation, process improvements, and knowledge‑sharing.
• Act as an escalation point for endpoint‑security issues and policy conflicts.

Technical Skills and Experience Required:

Essential Requirement:

• 3–5 years of experience in endpoint security, Microsoft endpoint platforms, or XDR security operations. Strong understanding of endpoint protection, application control, device configuration, identity‑driven access, and data‑protection fundamentals.

Must Have:

• Microsoft Defender XDR
• Microsoft Defender for Cloud
• ThreatLocker (or equivalent application control / allowlisting platform)
• Microsoft Intune
• Group Policy Objects (GPO)
• MECM (Microsoft Endpoint Configuration Manager)
• Entra ID (Azure AD)
• Microsoft Purview (Information Protection, DLP, Insider Risk, Data Governance)

Added Advantage:

• Nozomi OT or other OT/ICS endpoint visibility tools
• Basic scripting (PowerShell) for policy validation or automation

Preferred Industry Background:
Experience in the Finance, Banking, or Insurance sectors is highly desirable. Prior exposure to production support and interaction with business users is an added advantage.

Why Consider This Opportunity?
This role provides the opportunity to:

• Shape high visibility transformation engagements

• Drive influence across key solution areas including Cloud, Data, AI, and ServiceNow

• Build deeper relationships with customers, account teams, and practice leadership

• Contribute directly to practice growth, capability uplift, and strategic direction

• Advance your consulting career in a role with both delivery and growth responsibilities

Our culture and benefits: DXC is committed to building better futures for our customers, colleagues, environment, and communities. We take care of each other and foster a culture of inclusion, belonging and corporate citizenship. We put this to action developing and implementing societal initiatives within our Social Impact Practice.

As an employer of choice, our “people first” philosophy means we offer competitive remuneration, benefits, training, and career opportunities that reflect our commitment to improving the lives of our employees, and the communities in which we live and work. Some of these include.

• Extensive resources to support your onboarding and continual development including DXC University

• DXC Recognition, our global virtual platform that fosters a culture of appreciation and celebration with real-time reward and recognition

• We know that great people refer great people. We will reward you when you bring your friends and family to work at DXC

• More time to do the things you love with flexible leave options, including purchased leave

• Take time to give back with charitable and emergency services volunteer days

• Well-being matters to us and our Employee Assistance Program is there to support you and your family.

How to apply & our commitment to you in return: If you would like to be part of a culture that drives innovation, delivers results, rewards performance and encourages ideas, then please press the "Apply Now" button to submit your resume.

In return, we agree to ensure a hiring process that is enjoyable, thorough, and fair. We strive to provide an environment that lets you thrive and show off the very best version of yourself, while learning about us at the same time.

Interviews and onboarding are conducted online, as part of us being a virtual-first company.

We are an Equal Opportunity Employer: DXC is proud to be an equal opportunity employer and we welcome submissions from people from all walks of life. We celebrate our diversity and recognise it is the unique contributions of our people that give us our edge. We stand by the ‘bring your whole-self to work’ philosophy. It is our inclusive culture that powers our results, and our company grows only if our people grow.

Accommodation of special needs for qualified candidates may be considered within the framework of the DXC Accommodation Policy. In addition, DXC Technology is committed to working with and providing reasonable accommodation to support qualified individuals with physical and mental disabilities.

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.