Senior Security Engineer (Microsoft Security)

What you’ll do

• Own the design, deployment, and tuning of the Microsoft security stack: Defender (Endpoint, Office 365, Identity, Cloud Apps), Purview, Entra ID, and Microsoft 365 security controls
• Lead detection engineering, incident triage, and response using Defender XDR and Microsoft Sentinel
• Build and enforce data protection and governance programs in Purview (DLP, sensitivity labels, insider risk, eDiscovery, retention)
• Harden M365 tenant configuration (Conditional Access, MFA, PIM, Intune/endpoint compliance) and drive secure-score improvements
• Partner with IT, Compliance, and Legal on risk assessments, audits, and policy
• Mentor engineers and set technical direction for the Microsoft security roadmap

What you bring

• 6+ years in security engineering, with deep, hands-on expertise in the Microsoft security ecosystem (Defender, Purview, M365, Entra ID)
• Strong experience with KQL, plus automation and scripting (PowerShell, Graph API, Logic Apps/Power Automate)
• Experience with SIEM/SOAR, threat hunting, and incident response
• Working knowledge of frameworks and regulations such as NIST, CIS, SOC 2, HIPAA, and ISO 27001
• Solid grounding in networking, identity, endpoint, and email security
• Excellent communication skills, with the ability to translate risk for technical and non-technical audiences
• Nice to have: SC-200, SC-300, SC-400, or MS-500; CISSP or similar. Azure IaaS experience is not required.

Work Authorization

s, s, andholders able to work directly on a 1099 basis. Third-party / corp-to-corp submissions will not be considered.