Microsoft Security Engineer

We are looking for an experienced Microsoft Security Engineer to provide dedicated security operations and administration support across the Microsoft security ecosystem.

The role will be responsible for Microsoft 365 security, identity and access management, threat detection and response, SIEM/SOC operations, security monitoring, compliance, and security automation.

The successful candidate will work closely with IT and business stakeholders to strengthen the organization's security posture, investigate security incidents, support threat-hunting activities, and implement Microsoft security best practices.

This is a dedicated onsite resource during office hours, with on-call support after working hours as required.

Key Responsibilities

• Administer and monitor the organization's Microsoft security environment.
• Manage and maintain Microsoft 365 security controls and configurations.
• Monitor security alerts, investigate incidents, and coordinate appropriate response actions.
• Identify security risks and recommend improvements to strengthen the organization's security posture.
• Support identity and access security across Microsoft Entra ID (Azure AD).
• Configure and manage Conditional Access, Multi-Factor Authentication (MFA), and Identity Governance.
• Administer and monitor Microsoft Defender security solutions.
• Manage Microsoft Defender for Endpoint, including endpoint protection, detection, investigation, and response.
• Manage Microsoft Defender for Office 365 for email and collaboration security.
• Support Microsoft Defender for Identity and identity-related threat detection.
• Monitor and manage Microsoft 365 Defender incidents and alerts.
• Administer and support Microsoft Sentinel as the organization's SIEM platform.
• Perform security monitoring, incident investigation, threat hunting, and security response.
• Investigate and respond to malware, phishing, ransomware, and other security incidents.
• Support security hardening and remediation activities across Microsoft environments.
• Implement and maintain Data Loss Prevention (DLP) policies and controls.
• Support eDiscovery, Microsoft Compliance Manager, Insider Risk Management, and Microsoft Information Protection (MIP).
• Conduct root-cause analysis following significant security incidents.
• Develop and maintain security reports, dashboards, and management-level security metrics.
• Prepare executive security dashboards and periodic security reports.
• Develop and maintain PowerShell scripts for security administration and automation.
• Identify opportunities to automate repetitive security operations and improve response efficiency.
• Maintain accurate security documentation, procedures, and incident records.
• Work with internal IT teams and stakeholders to implement security recommendations and remediation actions.
• Stay current with Microsoft security technologies, emerging threats, and security best practices.

Required Technical SkillsIdentity & Access Management

• Microsoft Entra ID / Azure AD
• Conditional Access
• Multi-Factor Authentication (MFA)
• Identity Governance
• Identity security and access controls

Microsoft Security Solutions

• Microsoft Defender
• Microsoft Defender for Endpoint
• Microsoft Defender for Office 365
• Microsoft Defender for Identity
• Microsoft 365 Defender

SIEM & SOC

• Microsoft Sentinel
• Security Monitoring
• Security Alert Investigation
• Incident Investigation
• Threat Hunting
• Security Incident Response

Compliance & Governance

• Data Loss Prevention (DLP)
• eDiscovery
• Microsoft Compliance Manager
• Insider Risk Management
• Microsoft Information Protection (MIP)

Security Operations

• Malware Detection & Response
• Phishing Investigation & Response
• Ransomware Protection
• Security Hardening
• Vulnerability Remediation
• Security Incident Management
• Root Cause Analysis

Automation & Reporting

• PowerShell Scripting
• Security Automation
• Security Reporting
• Executive Security Dashboards
• Security Metrics and Analysis

Experience & Qualifications

• Relevant experience in Microsoft Security Operations and Microsoft 365 Security Administration.
• Hands-on experience administering Microsoft security technologies in an enterprise environment.
• Practical experience with Microsoft Defender, Microsoft Sentinel, Entra ID, and Microsoft 365 security.
• Strong understanding of security monitoring, incident investigation, threat detection, and response.
• Experience with security policies, compliance controls, and identity security.
• Good PowerShell scripting and automation skills.
• Strong analytical and problem-solving skills.
• Good communication and documentation skills.
• Ability to work independently as a dedicated security resource.

Deployment & Support Requirement

• Dedicated support resource
• Onsite during office hours
• On-call support after working hours
• Willingness to respond to critical security incidents outside normal working hours when required.

Preferred Candidate Profile

The ideal candidate is a hands-on Microsoft Security Engineer / Security Operations Engineer with strong practical experience across the Microsoft security stack. The candidate should be comfortable managing day-to-day security operations as well as investigating incidents, performing threat hunting, strengthening security controls, and providing clear security reporting to stakeholders.

Job Type: Full-time

Experience:

• Ionic Framework: 1 year (Required)

Work Location: In person