We are looking for an experienced Microsoft 365 Security & Threat Protection Engineer to enhance the organization’s cloud security posture and safeguard business-critical data. The ideal candidate will have hands-on expertise with Microsoft Defender, Sentinel, Purview, Entra ID (Azure AD), domain / email security (DMARC, DKIM, SPF), and automation using PowerShell scripting. This role will drive threat protection, compliance enforcement, incident response, and continuous security improvements across the Microsoft 365 ecosystem.
Key Responsibilities
Identity & Access Security
- Configure and enforce identity protection using Microsoft Entra ID (Azure AD), MFA, Conditional Access, and PIM.
Threat Protection & Monitoring
Deploy, configure, and monitor Microsoft Defender (Office 365, Endpoint, Identity).Investigate and respond to threats using Microsoft Sentinel / Defender XDR.Data Security & Compliance
Implement and manage Microsoft Purview for DLP, data classification, insider risk, and compliance.Domain & Email Security
Configure and maintain DMARC, DKIM, and SPF to prevent spoofing and email threats.Automation & Scripting
Use PowerShell scripting to automate security configurations, policies, and operational workflows.Incident Response & Posture Improvement
Lead investigations, containment, and remediation.Improve security posture using Microsoft Secure Score and continuous hardening.Reporting & Collaboration
Deliver weekly / monthly security posture and threat reports (Power BI dashboards).Collaborate with IT, compliance, and business stakeholders to align with standards and regulations.Scope of Work (Deliverables)
Enterprise security assessment & roadmapDeployment of E5 security stack (Defender XDR, Entra ID Protection, Purview)SIEM / XDR implementation and continuous threat monitoring24×7 incident triage, response, and forensic supportThreat hunting and behavioral analyticsCompliance and data governance enablementExecutive reporting & posture reviewsOptional adversarial simulation and dark web monitoring