EndPoint Security Subject Matter Expert

DXC Technology - where brilliant people embrace change and seize opportunities to advance their careers and amplify customer success. People are the heart of our business. We support each other and work as a team, globally and locally to deliver excellence for our customers and colleagues. We live in more than 70 countries, speak multiple languages and work with over 6,000 customers on almost every continent. We use the power of technology to deliver mission critical IT services that move the world. DXC.com At DXC we pride ourselves on delivering excellence in everything we do. What this means for you is the opportunity to be a part of delivering innovative solutions and helping to solve real business problems for a wide variety of valued clients.

Summary The Endpoint Security Subject Matter Expert is responsible for strengthening and managing enterprise‑grade endpoint protection by leading the deployment and optimization of Microsoft Defender XDR and Defender for Cloud, implementing application control through platforms such as ThreatLocker, and maintaining endpoint governance via Intune, GPO, MECM, and Entra ID. The role ensures secure device configuration, threat detection, identity‑driven access, and data protection using Microsoft Purview, while also supporting OT/ICS endpoint visibility where required. The SME collaborates closely with SOC, Cloud, Identity, and Infrastructure teams, serving as an escalation point for endpoint‑security issues, contributing to process improvements, and troubleshooting endpoint‑level incidents.

Lead deployment, configuration, and optimization of Microsoft Defender XDR, ensuring strong endpoint protection, threat detection, device hardening, and integration across the Microsoft security ecosystem. Administer and maintain Microsoft Defender for Cloud, including security recommendations, posture management, and hybrid/cloud workload protection. Manage and maintain ThreatLocker or other application‑control platforms, including allowlisting, policy enforcement, ringfencing, and operational troubleshooting. Implement and optimize endpoint governance using Microsoft Intune, including configuration profiles, compliance policies, security baselines, and device‑lifecycle management. Support directory, identity, and device policy integration using Entra ID (Azure AD), ensuring secure authentication, conditional access, and identity‑driven device posture. Apply and tune Group Policy Objects (GPO) and MECM (Microsoft Endpoint Configuration Manager) for on‑premises and hybrid Windows endpoint management. Support and maintain Microsoft Purview solutions, including Information Protection, DLP, Insider Risk, and Data Governance; to strengthen endpoint‑level data protection. Assist in basic integration and monitoring of Nozomi OT or other OT/ICS endpoint‑visibility tools to expand security coverage beyond IT environments. Monitor endpoint‑related alerts, investigate incidents, and collaborate with SOC, Cloud, and Infrastructure teams to drive remediation activities. Conduct endpoint‑level troubleshooting using built‑in Microsoft tools, event logs, and device‑health telemetry to resolve issues around policy enforcement, protection status, or application behavior. Document endpoint configurations, baselines, and policy changes, and support operational handover after deployment or major updates. Apply deep subject‑matter expertise across endpoint protection, application control, and Microsoft‑based endpoint governance Work independently on moderately complex to advanced endpoint‑security initiatives. Collaborate closely with SOC, Cloud Security, Identity, and Infrastructure teams to ensure consistent endpoint security posture. Contribute to documentation, process improvements, and knowledge‑sharing. Act as an escalation point for endpoint‑security issues and policy conflicts. Technical Skills and Experience Required: Essential