Microsoft Security Specialist

We are seeking a skilled Microsoft Security Engineer to enhance and maintain the security posture across Microsoft 365, endpoints, cloud environments, identity, and data platforms. The ideal candidate will have extensive hands-on experience with Microsoft Defender, Sentinel, Entra ID, Purview, Azure Security, and ISO/IEC 27001 standards. Experience within a Managed Service Provider (MSP) environment is highly desirable. This role involves managing advanced security tools, conducting vulnerability assessments, leading incident response, and supporting compliance initiatives to ensure robust protection of organizational assets.

Key Responsibilities

- Manage and secure the Microsoft Defender XDR ecosystem, including Defender for Endpoint, Office 365, Identity, Cloud Apps, and Cloud.
- Oversee Microsoft Sentinel and SentinelOne platforms, handling SIEM/SOAR operations, KQL queries, threat hunting, security monitoring, automation, and incident response.
- Administer Microsoft Entra ID security features such as Conditional Access, Multi-Factor Authentication (MFA), Privileged Identity Management (PIM), Identity Protection, Role-Based Access Control (RBAC), Access Reviews, and privileged access management.
- Implement and manage Microsoft Purview capabilities, including Data Loss Prevention (DLP), Information Protection, Sensitivity Labels, eDiscovery, Insider Risk Management, retention policies, and data governance.
- Deploy and maintain Azure security controls, including Defender for Cloud, Azure Policy, Key Vault, Network Security Groups (NSGs), Private Endpoints, and RBAC.
- Conduct vulnerability management, security assessments, attack surface reduction, security hardening, and remediation efforts.
- Implement Zero Trust principles, least-privilege access models, identity governance, encryption, and data security controls.
- Monitor Microsoft Secure Score and develop strategies to continuously improve the organization’s security posture.
- Manage Microsoft security licenses, subscriptions, features, and optimize license utilization.
- Lead security incident response activities, including root cause analysis, remediation, and post-incident improvements.
- Develop and maintain security policies, standards, technical baselines, incident response procedures, and comprehensive documentation.
- Support ISO/IEC 27001 initiatives through risk assessments, ISMS requirements, audits, evidence collection, compliance activities, and remediation.
- Provide security recommendations, technical guidance, and support to IT teams and management.
- Collaborate with internal teams and clients to identify security risks and implement appropriate security solutions.

Required Qualifications

- Proven hands-on experience with Microsoft Defender, Microsoft Sentinel, SentinelOne, Microsoft Entra ID, Microsoft Purview, Microsoft 365, and Azure Security.
- Strong understanding of Identity and Access Management (IAM), MFA, PIM, Conditional Access, RBAC, DLP, and data protection strategies.
- Experience in threat hunting, security monitoring, incident response, vulnerability management, and security hardening.
- Working knowledge of ISO/IEC 27001, Information Security Management Systems (ISMS), Zero Trust frameworks, MITRE ATT&CK, risk management, audits, and compliance.
- Proficiency with Kusto Query Language (KQL), security automation, SIEM/SOAR platforms, and security operations.
- Excellent troubleshooting, analytical, documentation, and communication skills.
- Ability to thrive in a fast-paced environment while managing multiple security priorities.
- Previous experience in an MSP environment is highly preferred.

Preferred Qualifications

- SC-100: Microsoft Cybersecurity Architect certification.
- SC-200: Security Operations Analyst certification.
- AZ-500: Azure Security Engineer Associate certification.
- ISO/IEC 27001 Lead Implementer or Lead Auditor certification.

This position offers a competitive salary commensurate with experience and the opportunity to work in a dynamic environment focused on cutting-edge Microsoft security technologies.