Senior Microsoft Security Engineer

Job Description

Seeking an experienced Senior Microsoft Security Engineer to design, implement, manage, and optimize enterprise security solutions across Microsoft and Check Point technologies. The ideal candidate will have deep expertise in Microsoft Defender XDR, Microsoft Sentinel, Microsoft Purview, Microsoft 365 Security, Microsoft Entra ID, and Check Point security platforms.

This role requires strong technical skills, consulting experience, customer-facing communication, and the ability to lead security transformation initiatives for enterprise clients.

Microsoft Defender

• Deploy and manage Microsoft Defender XDR
• Configure Microsoft Defender for Endpoint
• Manage Microsoft Defender for Identity
• Configure Microsoft Defender for Office 365
• Implement Microsoft Defender for Cloud Apps
• Perform attack simulation training
• Investigate security incidents
• Tune security policies
• Reduce false positives
• Manage vulnerability assessments
• Configure automated investigation and remediation

Microsoft Sentinel (SIEM/SOAR)

• Design Microsoft Sentinel architecture
• Deploy Sentinel workspaces
• Configure data connectors
• Develop Analytics Rules
• Build Hunting Queries (KQL)
• Develop Automation Rules
• Create Logic Apps playbooks
• Build Workbooks and Dashboards
• Optimize SIEM costs
• Perform threat hunting
• Support Security Operations Center (SOC)

Microsoft Purview

• Deploy Microsoft Purview Information Protection
• Configure Sensitivity Labels
• Configure Retention Labels
• Implement Data Loss Prevention (DLP)
• Configure Insider Risk Management
• Implement Communication Compliance
• Configure eDiscovery (Standard & Premium)
• Deploy Records Management
• Implement Data Lifecycle Management
• Support Compliance Manager

Microsoft 365 Security

• Secure Microsoft Teams
• Secure SharePoint Online
• Secure Exchange Online
• Secure OneDrive
• Implement Conditional Access
• Configure Multi-Factor Authentication (MFA)
• Configure Microsoft Entra ID Identity Protection
• Configure Privileged Identity Management (PIM)
• Manage Secure Score improvements

Check Point Security

• Configure Check Point Quantum Gateways
• Manage Security Policies
• Configure IPS
• Configure Application Control
• Configure URL Filtering
• Configure Threat Prevention
• VPN Configuration
• High Availability Configuration
• Firewall Rule Optimization
• Security Policy Review

Incident Response

• Investigate cyber security incidents
• Perform root cause analysis
• Conduct malware investigations
• Perform forensic analysis
• Coordinate remediation activities
• Create incident reports
• Recommend security improvements

Governance & Compliance

• Support ISO 27001
• Support NIST CSF
• Support CIS Controls
• Support Zero Trust initiatives
• Conduct security assessments
• Participate in internal and external audits
• Create security documentation
• Review security baselines

Microsoft

• Microsoft Defender XDR
• Defender for Endpoint
• Defender for Identity
• Defender for Office 365
• Defender for Cloud Apps
• Microsoft Sentinel
• Microsoft Purview
• Microsoft Entra ID
• Microsoft Intune
• Exchange Online
• SharePoint Online
• Microsoft Teams
• Azure

Security

• SIEM
• SOAR
• XDR
• DLP
• CASB
• Zero Trust
• IAM
• PKI
• Identity Protection
• Conditional Access
• Vulnerability Management

Check Point

• Quantum Security Gateway
• SmartConsole
• Threat Prevention
• IPS
• VPN
• Application Control
• URL Filtering
• Identity Awareness

Scripting

• PowerShell
• Kusto Query Language (KQL)
• Microsoft Graph API
• REST API
• JSON

Microsoft

• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Security Operations Analyst (SC-200)
• Microsoft Certified: Information Protection Administrator (SC-400)
• Microsoft Certified: Identity and Access Administrator (SC-300)
• Microsoft Certified: Security Administrator (MS-500)

Security

• CISSP
• CISM
• CISA
• CEH
• CompTIA Security+
• ISO/IEC 27001 Lead Implementer or Lead Auditor

Check Point

• Check Point Certified Security Administrator (CCSA)
• Check Point Certified Security Expert (CCSE)

Experience

• 5–10+ years in Cyber Security
• 3+ years implementing Microsoft Security solutions
• Experience with enterprise SOC environments
• Experience with Microsoft 365 migrations and security
• Experience implementing Microsoft Sentinel SIEM
• Experience implementing Microsoft Purview compliance solutions
• Experience managing Check Point firewalls
• Experience with cloud security (Azure)