Principal Information Security Engineer (Immediate Joiner)

About the role

An organization is looking for an experienced Principal Information Security Engineer to manage, administer and optimise its enterprise security platforms. The role covers implementing security policies, monitoring threats, investigating incidents, maintaining secure configurations and continuously improving the security posture. Immediate joiners are sought.

Key responsibilities

• Administer and optimise Microsoft 365 E5 security solutions (Defender, Purview, Entra ID) and maintain secure baselines for Exchange Online, SharePoint, Teams and OneDrive.
• Monitor and investigate alerts with Defender XDR, Sentinel and other SIEM tools; support threat hunting, log analysis and incident triage.
• Design, implement and tune DLP policies and manage data classification, sensitivity labelling, incident investigations and exfiltration risk reporting.
• Manage PAM solutions (CyberArk, Delinea, BeyondTrust) including privileged account onboarding, credential rotation, session isolation and just-in-time access.
• Configure and maintain WAFs, analyse traffic, investigate false positives and support firewall rules, network segmentation and secure remote access.
• Implement Zero Trust controls (Conditional Access, MFA, device compliance, identity protection) and support SASE platforms such as Netskope, Zscaler and Cato Networks.
• Support vulnerability scanning, patch validation and remediation tracking, and security audits and compliance assessments aligned with ISO 27001.
• Maintain security documentation, SOPs and reports, and automate tasks with PowerShell, KQL or Python.

Required profile

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity or a related field.
• 4-7 years of hands-on experience in information security engineering or security operations.
• Proven experience administering Microsoft 365 E5 security workloads and practical experience with DLP, PAM and WAF in enterprise settings.
• Strong understanding of Zero Trust, Conditional Access, identity protection and access management.
• Experience with SIEM, security monitoring, log analysis, threat detection and incident response.
• Preferred certifications: SC-200, SC-300, SC-401, CompTIA Security+, CEH, GIAC or vendor certifications in PAM/WAF.

Required skills

• Microsoft 365 E5 security (Defender, Purview, Entra ID)
• DLP, PAM and WAF administration
• SIEM and log analysis
• PowerShell, KQL or Python scripting and automation (an advantage)