Principal Information Security Engineer (Immediate Joiner)

We are seeking a skilled Principal Information Security Engineer to lead the management, administration, and optimization of our enterprise security platforms. The successful candidate will have extensive hands-on experience with Microsoft 365 E5 security workloads, including Data Loss Prevention (DLP), Privileged Access Management (PAM), Web Application Firewalls (WAF), and Zero Trust security frameworks. This role focuses on implementing security policies, monitoring threats, investigating incidents, maintaining secure configurations, and continuously enhancing the organization’s overall security posture.

Key Responsibilities

- Administer and optimize Microsoft 365 E5 security solutions such as Microsoft Defender, Microsoft Purview, and Microsoft Entra ID.
- Maintain secure configuration baselines for Exchange Online, SharePoint, Microsoft Teams, and OneDrive.
- Monitor and investigate security alerts using Microsoft Defender XDR, Microsoft Sentinel, and other SIEM tools.
- Design, implement, and fine-tune DLP policies across endpoints, email, cloud applications, and on-premises repositories.
- Manage data classification, sensitivity labeling, DLP incident investigations, and data exfiltration risk reporting.
- Administer PAM solutions including CyberArk, Delinea, and BeyondTrust, handling privileged account onboarding, credential rotation, session isolation, and just-in-time access.
- Configure and maintain WAF solutions to protect web applications and APIs against common threats such as OWASP Top 10 vulnerabilities.
- Manage WAF policies, analyze traffic patterns, investigate false positives, and adjust security rules accordingly.
- Support firewall rule management, network segmentation, and secure remote access controls.
- Implement and maintain Zero Trust security controls including Conditional Access, multifactor authentication (MFA), device compliance, and identity protection.
- Support Secure Access Service Edge (SASE) and secure web access platforms like Netskope, Zscaler, and Cato Networks.
- Perform security monitoring, log analysis, threat hunting, and incident triage across enterprise security platforms.
- Investigate suspicious activities, phishing reports, and endpoint detections, escalating confirmed incidents per incident response protocols.
- Support vulnerability scanning, patch validation, and remediation tracking efforts.
- Develop and maintain security documentation, technical configurations, standard operating procedures, and operational reports.
- Automate repetitive security tasks using scripting languages such as PowerShell, KQL, or Python.
- Assist with security audits, compliance assessments, and technical remediation aligned with ISO 27001 and other relevant standards.

Required Qualifications

- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
- 4 to 7 years of hands-on experience in information security engineering or security operations.
- Proven expertise administering Microsoft 365 E5 security workloads, including Defender, Purview, and Entra ID.
- Practical experience implementing and managing DLP, PAM, and WAF solutions within enterprise environments.
- Strong understanding of Zero Trust principles, Conditional Access, identity protection, and access management.
- Experience working with SIEM platforms, security monitoring, log analysis, threat detection, and incident response.
- Knowledge of vulnerability management, endpoint security, network security, and security configuration management.
- Scripting and automation skills using PowerShell, KQL, or Python are advantageous.
- Excellent troubleshooting, analytical, documentation, and communication skills.

Preferred Certifications

- Microsoft Certified: Security Operations Analyst Associate (SC-200)
- Microsoft Certified: Identity and Access Administrator Associate (SC-300)
- Microsoft Certified: Information Security Administrator Associate (SC-401) or relevant Microsoft Purview certification
- CompTIA Security+ or equivalent security certification
- Vendor certifications in PAM or WAF technologies, such as CyberArk or Imperva
- Certified Ethical Hacker (CEH), GIAC, or other recognized cybersecurity certifications

This position offers the opportunity to work with cutting-edge security technologies in a dynamic environment, contributing directly to the protection and resilience of the organization’s critical assets.