Microsoft Security Engineer

We are seeking a skilled Microsoft Security Engineer to enhance and maintain the security posture across Microsoft 365, endpoints, cloud environments, identity, and data platforms. The successful candidate will have extensive hands-on experience with Microsoft security tools such as Defender, Sentinel, Entra ID, Purview, and Azure Security. Experience within a Managed Service Provider (MSP) environment is highly desirable. This role involves managing security operations, incident response, compliance initiatives, and collaborating with internal teams to safeguard organizational assets.

Key Responsibilities

- Manage and secure the Microsoft Defender XDR ecosystem, including Defender for Endpoint, Office 365, Identity, Cloud Apps, and Cloud environments.
- Oversee Microsoft Sentinel and SentinelOne platforms, handling SIEM/SOAR operations, KQL queries, threat hunting, security monitoring, automation, and incident response.
- Administer Microsoft Entra ID security features such as Conditional Access, Multi-Factor Authentication (MFA), Privileged Identity Management (PIM), Identity Protection, Role-Based Access Control (RBAC), Access Reviews, and privileged access management.
- Manage Microsoft Purview capabilities, including Data Loss Prevention (DLP), Information Protection, Sensitivity Labels, eDiscovery, Insider Risk Management, retention policies, and data governance.
- Implement and maintain Azure security controls, including Defender for Cloud, Azure Policy, Key Vault, Network Security Groups (NSGs), Private Endpoints, and RBAC.
- Conduct vulnerability management, security assessments, attack surface reduction, security hardening, and remediation activities.
- Apply Zero Trust principles, enforce least-privilege access, identity governance, encryption, and data security controls.
- Monitor Microsoft Secure Score and develop strategies to continuously improve the organization's security posture.
- Manage Microsoft security licenses, subscriptions, feature utilization, and ensure cost-effective license management.
- Lead security incident response efforts, including root cause analysis, remediation, and post-incident improvements.
- Develop and maintain security policies, standards, technical baselines, incident response procedures, and documentation.
- Support ISO/IEC 27001 initiatives, including risk assessments, ISMS requirements, audits, evidence collection, compliance, and remediation activities.
- Provide security recommendations, technical guidance, and support to IT teams and management.
- Collaborate with internal teams and clients to identify security risks and implement appropriate security solutions.

Required Qualifications

- Proven hands-on experience with Microsoft Defender, Microsoft Sentinel, SentinelOne, Microsoft Entra ID, Microsoft Purview, Microsoft 365, and Azure Security.
- Strong understanding of Identity and Access Management (IAM), MFA, PIM, Conditional Access, RBAC, Data Loss Prevention (DLP), and data protection principles.
- Experience in threat hunting, security monitoring, incident response, vulnerability management, and security hardening techniques.
- Working knowledge of ISO/IEC 27001 standards, Information Security Management Systems (ISMS), Zero Trust architecture, MITRE ATT&CK framework, risk management, audits, and compliance processes.
- Skilled in Kusto Query Language (KQL), security automation, SIEM/SOAR platforms, and security operations.
- Excellent troubleshooting, analytical, documentation, and communication skills.
- Ability to manage multiple security priorities effectively in a fast-paced environment.
- Previous experience working in an MSP environment is highly preferred.

Preferred Qualifications

- SC-100: Microsoft Cybersecurity Architect certification.
- SC-200: Security Operations Analyst certification.
- AZ-500: Azure Security Engineer Associate certification.
- ISO/IEC 27001 Lead Implementer or Lead Auditor certification.

This position offers a competitive salary commensurate with experience and the opportunity to work in a dynamic environment focused on cutting-edge Microsoft security technologies.