Microsoft 365 Security Engineer - onsite Plano

Microsoft 365 Security Engineer - onsite Plano

Job Category
:
Indiv Contributor-Slry

Requisition Number
: ITSYS
003389

Apply now

• Posted :
  July 8, 2026
• Full-Time
• On-site

Showing 1 location

Plano, TX 75024, USA

WELLTOWER – REIMAGINE REAL ESTATE WITH US

At Welltower, we’re transforming how the world thinks about senior living and wellness-focused real estate. As a global leader in residential wellness and healthcare infrastructure, we create vibrant, purpose-driven communities where housing, healthcare, and hospitality converge. Our culture is fast-paced, collaborative, and endlessly ambitious—guided by our mantra:
The only easy day was yesterday.

We’re looking for bold, independent thinkers who thrive on challenge, embrace complexity, and are driven to deliver long-term value. Every team member is empowered to think like an owner, innovate fearlessly, and lead from where they stand. If you’re passionate about outcomes and inspired by the opportunity to shape the future of healthcare infrastructure, we want you on our best-in-class team.

ABOUT THE ROLE

Welltower is seeking a Microsoft 365 Security Engineer to engineer and operationalize security capabilities across email, identity, endpoint detection, and data protection. This role is a key engineering partner within Digital Workspace, helping translate workspace technology strategy into scalable, secure-by-design Microsoft 365 controls and operational standards.

The position partners closely with Digital Workspace, Security Operations, Messaging/Infrastructure, and Endpoint teams to implement secure collaboration, strengthen control effectiveness, and improve operational maturity. It is intentionally focused on Microsoft 365 security engineering rather than broader workplace technology domains such as telephony, print, digital signage, or physical security.

Email Security (Primary Focus)

• Engineer and optimize core Microsoft 365 email security capabilities, including Defender for Office 365, Exchange Online Protection, and anti-phishing controls.
• Design secure mail flow, enforce best practices, and implement policy-driven protections across inbound, outbound, and internal messaging.
• Develop and maintain secure configuration standards for email protection, spoofing prevention, and user-facing collaboration controls.
• Lead technical response and continuous improvement efforts for phishing, business email compromise, and related messaging threats.
• Engineer, tune, and support Microsoft Defender capabilities, including Defender for Endpoint and Defender for Cloud Apps, with a focus on scalable enterprise deployment.
• Partner with endpoint engineering to align device posture, compliance signals, and Defender telemetry with Conditional Access and Zero Trust objectives.
• Improve detection fidelity, reduce false positives, and strengthen operational readiness through repeatable engineering standards and control validation.
• Collaborate with Security Operations on incident response, threat hunting, and continuous improvement of endpoint and cloud threat protections.

Data Protection (Purview)

• Design, implement, and manage Microsoft Purview capabilities, including Data Loss Prevention, sensitivity labeling, classification, Insider Risk, and eDiscovery.
• Translate business and compliance requirements into scalable technical controls that support governance, data handling standards, and secure collaboration.
• Develop and maintain policy-aligned protection standards for sensitive information across Microsoft 365 workloads.
• Partner with stakeholders to validate control effectiveness, support investigations, and continuously improve information protection maturity.

Identity Security

• Support and help operationalize identity security controls, including Conditional Access, MFA/passwordless strategies, Privileged Identity Management, and secure access governance.
• Partner on lifecycle-oriented identity standards that improve authentication strength, reduce administrative risk, and support least-privilege access.
• Ensure engineering decisions align with Zero Trust architecture, enterprise security baselines, and broader Digital Workspace standards.

Operational…