MS Defender Attack Surface Reduction (ASR)

Job#: 3045923

Job Description:

Client: Top 5 Bank

Terms: 12-month Contract

Location: 5 Days within the month/Downtown

Hours: 9-5

Key Skills

Microsoft Defender for Endpoint expertise

Attack Surface Reduction rule implementation and optimization

Endpoint security strategy

Security policy design and governance

Threat prevention and control hardening

Stakeholder engagement

Program and project leadership

Risk assessment and prioritization

KQL, PowerShell or automation scripting

Metrics, reporting, and continuous improvement

Required Qualifications

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience.

7+ years of experience in cybersecurity, endpoint security, or security engineering roles.

3+ years of experience leading or managing security initiatives, programs, or technical workstreams.

Strong hands-on experience with Microsoft Defender for Endpoint and the broader Microsoft Defender stack.

Proven experience designing, implementing, and tuning Attack Surface Reduction rules in enterprise environments.

Strong understanding of:

• Endpoint threat vectors
• Malware and ransomware techniques
• Windows security controls
• Endpoint detection and prevention
• Security baselines and hardening standards
• Experience deploying security controls through Intune, Group Policy, or similar enterprise endpoint management tools.
  
  

Strong familiarity with Windows enterprise environments, including:

• Windows 10/11 and Windows Server Environments
• Active Directory / Entra ID
• Endpoint policy management
• Administrative templates
• PowerShell scripting
• Experience balancing security requirements with operational needs in large, complex environments.
  
  

Strong written and verbal communication skills, with the ability to translate technical concepts into business-friendly recommendations.

Nice to haves

• Assessment of current endpoint security posture
• Identification of high-value ASR opportunities
• Pilot planning, rule tuning, and phased rollout
• Production deployment and post-implementation monitoring
• Exception governance and continuous optimization
• Develop and maintain enterprise standards for endpoint hardening, threat prevention, and security configuration management.
• Lead risk-based decision-making for ASR deployment modes, including audit, warn, and block, balancing security outcomes with operational impact.
• Create governance processes for security control exceptions, change management, documentation, and executive reporting.
• Support incident response and post-incident reviews by identifying opportunities to improve preventive controls through Microsoft Defender and ASR capabilities.
• Stay current on Microsoft security product updates, emerging attack techniques, and industry best practices to continuously evolve the control environment.
  
  

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing® in Talent Satisfaction in the United States and Great Place to Work® in the United Kingdom and Mexico.

Everforth Apex Benefits Overview: In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA.

© 2026 Everforth, Inc. All rights reserved.

Everforth Apex Systems is part of the Commercial Segment of Everforth, Inc.

NYSE: EFOR

4400 Cox Road

Suite 200

Glen Allen, Virginia 23060

Everforth Apex is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Benefits Department at [email protected] or 804-523-8228. (Do not submit resumes or solicit consultants to this email address). UnitedHealthcare creates and publishes the Transparency in Coverage Machine-Readable Files on behalf of Everforth Apex.