We just switched to Malwarebytes from Sophos. To install MWB and assign endpoints to groups you've created in their Nebula console, MWB provides this command:
sudo launchctl setenv MALWAREBYTES_GROUP <GroupID> ; sudo -E /usr/sbin/installer -pkg Setup.MBEndpointAgent.pkg -target /
So I would upload the PKG to JAMF Cloud and put it in a policy and run that command (with the appropriate group IDs) in the Files and Processes part of the policy right? I haven't had to do this in a while and can't remember exactly.