Microsoft Security Engineer

We are seeking a skilled Microsoft Security Engineer to join our team based in Lahore. The successful candidate will be responsible for managing, monitoring, and enhancing security across Microsoft 365, endpoints, cloud environments, identity, and data platforms. This role requires hands-on expertise with Microsoft Defender, Microsoft Sentinel/SentinelOne, Microsoft Entra ID, Microsoft Purview, Azure Security, security licensing, and ISO/IEC 27001 standards. Experience within a Managed Service Provider (MSP) environment is highly desirable. The position offers a competitive salary commensurate with experience.

Key Responsibilities

- Manage and secure the Microsoft Defender XDR ecosystem, including Defender for Endpoint, Office 365, Identity, Cloud Apps, and Cloud services.
- Oversee Microsoft Sentinel and SentinelOne platforms, handling SIEM/SOAR operations, KQL queries, threat hunting, security monitoring, automation, and incident response.
- Administer Microsoft Entra ID security features such as Conditional Access, Multi-Factor Authentication (MFA), Privileged Identity Management (PIM), Identity Protection, Role-Based Access Control (RBAC), Access Reviews, and privileged access management.
- Manage Microsoft Purview capabilities including Data Loss Prevention (DLP), Information Protection, Sensitivity Labels, eDiscovery, Insider Risk Management, retention policies, and data governance.
- Implement and maintain Azure security controls, including Defender for Cloud, Azure Policy, Key Vault, Network Security Groups (NSGs), Private Endpoints, and RBAC.
- Conduct vulnerability management, security assessments, attack surface reduction, system hardening, and remediation activities.
- Apply Zero Trust principles, enforce least-privilege access, identity governance, encryption, and data security controls.
- Monitor Microsoft Secure Score and develop strategies to continuously improve organizational security posture.
- Review and manage Microsoft security licenses, subscriptions, features, and license utilization.
- Lead security incident response efforts, including root cause analysis, remediation, and post-incident improvements.
- Develop and maintain security policies, standards, technical baselines, incident response procedures, and documentation.
- Support ISO/IEC 27001 initiatives, including risk assessments, ISMS requirements, audits, evidence collection, compliance, and remediation activities.
- Provide security recommendations, technical guidance, and support to IT teams and management.
- Collaborate with internal teams and clients to identify security risks and implement appropriate solutions.

Required Qualifications

- Proven hands-on experience with Microsoft Defender, Microsoft Sentinel, SentinelOne, Microsoft Entra ID, Microsoft Purview, Microsoft 365, and Azure Security.
- Strong understanding of Identity and Access Management (IAM), MFA, PIM, Conditional Access, RBAC, Data Loss Prevention (DLP), and data protection strategies.
- Experience in threat hunting, security monitoring, incident response, vulnerability management, and security hardening.
- Working knowledge of ISO/IEC 27001 standards, Information Security Management Systems (ISMS), Zero Trust architecture, MITRE ATT&CK framework, risk management, audits, and compliance.
- Proficiency with Kusto Query Language (KQL), security automation, SIEM/SOAR platforms, and security operations.
- Excellent troubleshooting, analytical, documentation, and communication skills.
- Ability to work effectively in a fast-paced environment while managing multiple security priorities.
- Previous experience in an MSP environment is highly preferred.

Preferred Qualifications

- SC-100: Microsoft Cybersecurity Architect certification
- SC-200: Security Operations Analyst certification
- AZ-500: Azure Security Engineer Associate certification
- ISO/IEC 27001 Lead Implementer or Lead Auditor certification

This role offers an excellent opportunity to work with cutting-edge Microsoft security technologies and contribute to strengthening organizational security posture within a dynamic environment.