This position provides an opportunity to develop deep technical expertise across Microsoft's market-leading security technologies while working within a global cyber security function. The successful candidate will act as the Microsoft Defender XDR subject matter expert, influencing cyber strategy, driving operational improvements, and supporting the development of security capabilities across the organisation. The role offers exposure to advanced threat detection, threat hunting, incident response, identity protection, and AI-assisted security operations through Microsoft Security Copilot. In addition to hands-on technical responsibilities, the role provides opportunities to mentor and train other Cyber Security Analysts, contribute to integral security initiatives, and play a key role in enhancing Intertek's overall cyber security maturity. Support hours: 40 hours (9-18) / 5 days per week.

Salary:
$9'000.000 month Available

benefits:
· Access to best-in-class security training platform
· Eligibility for security certification on a regular basis Job Purpose:
• Act as Subject Matter Expert for Defender for Endpoint, Servers, Office 365, Cloud Apps, Identity and Security Copilot.
• Take primary responsibility for Microsoft Defender XDR operations in the region including incident response, threat hunting and security monitoring activities.
• Lead knowledge transfer and training activities for Cyber Security Analysts in the region Areas of responsibility:
• Primary stakeholder for Microsoft Defender XDR technologies.
• Provide SME guidance to Security Operations teams. Tasks
· Train and mentor Cyber Security Analysts on Defender XDR technologies, KQL, threat hunting and investigation techniques.




· Perform security event analysis and incident response activities.
· Conduct proactive threat hunting using Advanced Hunting and KQL.
· Investigate endpoint, server, identity, email and cloud security incidents.
· Develop detection content and tuning recommendations.
· Support vulnerability management and remediation activities.
· Use Microsoft Security Copilot to accelerate investigations and reporting.
· Develop operational runbooks, playbooks and knowledge articles. Knowledge
· Bachelor’s degree required; Master’s degree desired.
·

Experience:
2-5 years
• Experience with Microsoft Defender XDR, Defender for Endpoint, Defender for Servers, Defender for Office 365, Defender for Cloud Apps, Defender for Identity.
• Microsoft Security Copilot and Entra ID.
• Incident response, threat hunting, MITRE ATT&CK; and cyber defence operations. Skills
· KQL query development
· Security event correlation
· Threat hunting
· Incident response
· Malware investigation
· Trend analysis
· Stakeholder communication Abilities (Essential)
· Ability to investigate and respond to security incidents using Microsoft Defender XDR.
· Ability to analyse and correlate security events across endpoint, identity, email, server and cloud environments.
· Ability to conduct threat hunting using KQL and Advanced Hunting.
· Ability to identify, assess and mitigate cyber threats and vulnerabilities.
· Ability to communicate technical findings to technical and non-technical stakeholders.
· Ability to develop investigation playbooks, procedures and documentation.
· Ability to train, mentor and upskill Cyber Security Analysts on Defender XDR technologies.
· Ability to prioritise and manage multiple incidents in a fast-paced environment.

📌 Cyber Security Analyst Defender XDR specialist (Colombia)
🏢 Intertek
📍 Colombia