Principal Cybersecurity Engineer

Job Description Its not just about your career or job title Its about who you are and the impact you will make on the world. Because whether its for each other or our customers, we put People First. When our people come together, we Expand the Possible and continuously look for ways to improve what we create and how we do it. If you are constantly striving to grow, youre in good company. We are revolutionizing the way the world moves for future generations, and we want someone who is ready to move with us.

What do we want to know about you

You must have:

• Bachelors degree in computer science, Information Technology, related field, or a minimum of 8 years of experience in cybersecurity.
• Technical expertise in Microsoft Defender for Office 365 (MDO), including policy design, anti-phishing strategy, threat investigation and tuning at enterprise scale.
• Hands-on experience with Microsoft Defender for Endpoint (MDE), including EDR operations, Advanced Hunting (KQL), Attack Surface Reduction and detection engineering.
• Experience with Microsoft Purview, including Information Protection, Sensitivity Label architecture, DLP strategy, eDiscovery and data lifecycle governance.
• Ability to define and drive enterprise security strategies without direct managerial authority, influencing outcomes through technical credibility and thought leadership.
• Demonstrated success operationalizing security controls, embedding protection into real-world business workflows while minimizing friction and enabling productivity.
• Experience leading complex investigations, high-severity incident response, and root-cause analysis related to email, endpoint and data compromise.
• Proven ability to author technical standards, playbooks and design guidance that set direction for engineering teams and operational partners.
• Exceptional communication skills, with the ability to clearly articulate technical risk, trade-offs, and recommendations to security leadership, IT stakeholders and business partners.
• Must be willing to work weekends/off-shift hours, as needed during cybersecurity incidents.

We would love it if you had:

• Hands-on experience with enterprise security tools such as SIEM, SOAR, threat intelligence platforms and cloud security controls.
• Ability to work independently with strong time management skills, consistently driving value and delivering results without direct supervision.
• Commitment to continuous learning in an evolving cybersecurity landscape.

What will your typical day look like

• Accountability for technical authority over Microsoft Defender for Office 365, Microsoft Defender for Endpoint, and Microsoft Purview, with enterprise-wide architecture, design and control decisions established and maintained.
• Continuous analysis of threat trends, security telemetry, and control performance to ensure ongoing design, tuning and improvement of email, endpoint and data protection strategies.
• Participation in and leadership of complex investigations and high-severity incidents, with advanced hunting, deep technical analysis and root-cause identification.
• Close collaboration with response, intelligence, content, assurance, services, identity, IT, and business teams to ensure protection capabilities are embedded into day-to-day operations while supporting business productivity.
• Development and maintenance of technical standards, reference architectures, and playbooks, promoting consistency, scalability and clarity across protection platforms.
• Knowledge sharing and mentorship provided to engineers and practitioners, contributing to elevated engineering standards and technical maturity across the organization.
• Other duties as assigned.

While daily activities may vary, the focus remains on shaping the organizations cybersecurity posture and ensuring defenses remain resilient in an evolving threat landscape.

What about the physical demands of the job(Usual office job examples)

• Regularly remaining in a stationary position, often standing, or sitting for prolonged periods.
• Regularly required to attend meetings in person and virtually using video and audio computer equipment.
• Regularly repeating motions that may include the wrists, hands,and/or fingers, such as typing.
• Occasionally moving about to accomplish tasks or moving from one worksite to another.
• Occasionally light work that includes moving objects up to twenty pounds.

You may also be asked to perform other duties outside of your function or trade, for which adequate training will be provided if necessary.

Work Environment: (Usual office job)

• Hybrid work schedule (both on-site and remote)
• The employee will normally work in a temperature-controlled office environment, with frequent exposure to electronic office equipment. During visits to areas of operations, they may be exposed to extreme cold or hot weather conditions. Occasionally exposed to fumes or airborne particles, toxic or caustic chemicals and loud noise.