Senior Information Security Engineer - Microsoft

Purpose & Scope

The Senior Information Security Engineer – Microsoft 365 Security will serve as the subject matter expert (SME) for securing the organization’s Microsoft 365 environment. This role will design, implement, and manage advanced cloud security configurations across Microsoft Defender, Purview (DLP, Information Protection, Insider Risk), Entra  (Azure AD), and Exchange Online Protection. The engineer will ensure sensitive data is classified and protected, phishing attempts are reduced, and M365 platforms meet compliance, security, and business needs.

• Bachelor’s degree in Cybersecurity, Computer Science, or related field is required.
• Master's degree is preferred.
• Equivalent work experience considered in lieu of education requirement.

• 5+ years of experience in cybersecurity engineering, with 3+ years focused on Microsoft 365 security.
• Strong hands‑on expertise with Microsoft Defender XDR Suite (Endpoint, Office 365, Identity, Cloud Apps)
• Microsoft Purview (DLP, Information Protection, Insider Risk, eDiscovery)
• Entra  (Azure AD) including conditional access, identity protection, and MFA
• Exchange Online Protection and security policies
• Solid understanding of data classification, DLP, phishing mitigation, and cloud security best practices.
• Experience supporting compliance‑driven environments (HIPAA, ISO, NIST).

Industry certifications are preferred.