Security Engineer, Data

Infrastructure Security Engineer

Applied Systems is seeking an Infrastructure Security Engineer with deep expertise in the Microsoft Defender and Purview security ecosystems to design and operate our data protection and endpoint security infrastructure. You'll own the deployment and optimization of Microsoft Purview data governance and DLP, and Cloud App Security (CASB) capabilities across our Microsoft 365 environment. This role is perfect for an engineer who specializes in data security and has built real expertise with Microsoft's modern security stack;

you'll work on high‑impact initiatives around data classification, breach prevention, compliance automation, and endpoint threat response. You'll have the autonomy to own specific security domains while collaborating with cross‑functional teams and incident response.

• Design, implement, and maintain security controls across the Microsoft Defender suite and data protection platforms
• Design and deploy Microsoft Purview solutions including data classification, labeling, DLP, information barriers, and records management
• Implement and manage Microsoft Purview Compliance Manager and audit logging for regulatory compliance
• Design and maintain data security controls including Data Loss Prevention (DLP), encryption, and classification strategies
• Conduct security reviews and threat modeling of data flows and information governance models
• Implement and optimize Microsoft Cloud App Security (CASB) capabilities for SaaS application security and visibility
• Develop and maintain runbooks for data breach procedures and incident response involving Defender and Purview solutions
• Contribute to security monitoring, detection tuning, and alerting across Defender and Purview platforms
• Assist with proof‑of‑concept builds for new Microsoft Defender and Purview capabilities
• Participate in the Security Engineering Team on‑call rotation

• Minimum of 3 years' experience in security engineering or data security, with hands‑on work with Microsoft security products
• Advanced hands‑on experience with modern DLP solutions
• Demonstrated experience designing and implementing Microsoft Purview solutions for data governance and compliance
• Working knowledge of Data Loss Prevention (DLP) design, policy creation, and tuning across email, Teams, and endpoints
• Strong understanding of data classification and sensitivity labeling strategies in Microsoft 365 environments
• Experience with Microsoft Cloud App Security (CASB) or equivalent CASB technologies for SaaS visibility and control
• Advanced knowledge of Windows and/or macOS operating systems, particularly regarding Defender for Endpoint agent deployment and management
• Experience with one or more scripting languages (Power Shell, Python, Bash, C#)
• Knowledge of encryption technologies and key management in Microsoft 365 context
• Understanding of audit logging, threat intelligence integration, and advanced hunting in Defender platforms
• Knowledge of compliance frameworks and their application in cloud environments (SOC 2, HIPAA, GDPR, PCI‑DSS)
• Demonstrated ability to work with systems at scale
• Excellent written and verbal communication skills
• Strong problem‑solving abilities and attention to detail

• Hands‑on experience with Microsoft Purview Compliance Manager and regulatory compliance automation
• Working knowledge of Microsoft Entra  (formerly Azure AD) integration with Defender and Purview solutions
• Familiarity with Azure infrastructure (Azure Firewall, Network Security Groups, etc.)
• Experience with infrastructure‑as‑code technologies (Terraform, ARM templates, Bicep)
• Microsoft security certifications (Security Engineer, Enterprise Administrator, or similar)
• Experience with SIEM/SOAR integration with Microsoft Defender solutions