Microsoft Security Specialist

About the role

An experienced Microsoft Security Engineer is sought to manage, monitor and strengthen security across Microsoft 365, endpoints, cloud, identity and data environments. The role covers Microsoft Defender, Sentinel, Entra ID, Purview, Azure security, licensing and ISO/IEC 27001. Relevant experience in an MSP environment is preferred.

Key responsibilities

• Manage the Microsoft Defender XDR ecosystem (Endpoint, Office 365, Identity, Cloud Apps, Cloud)
• Manage Microsoft Sentinel and SentinelOne, including SIEM/SOAR, KQL, threat hunting, monitoring, automation and incident response
• Manage Microsoft Entra ID security (Conditional Access, MFA, PIM, Identity Protection, RBAC, Access Reviews, privileged access)
• Manage Microsoft Purview (DLP, Information Protection, sensitivity labels, eDiscovery, insider risk, retention, data governance)
• Maintain Azure security controls (Defender for Cloud, Azure Policy, Key Vault, NSGs, Private Endpoints, RBAC)
• Run vulnerability management, security assessments, hardening and remediation
• Implement Zero Trust, least privilege, identity governance, encryption and data security controls
• Monitor Microsoft Secure Score and review security licenses and subscriptions
• Lead incident response, root-cause analysis and post-incident improvements
• Develop security policies, standards, baselines, procedures and documentation
• Support ISO/IEC 27001 (risk assessments, ISMS, audits, evidence, compliance) and advise IT teams and management

Required profile

• Hands-on experience with Microsoft Defender, Sentinel, SentinelOne, Entra ID, Purview, M365 and Azure security
• Understanding of IAM, MFA, PIM, Conditional Access, RBAC, DLP and data protection
• Threat hunting, monitoring, incident response, vulnerability management and hardening experience
• Working knowledge of ISO/IEC 27001, ISMS, Zero Trust, MITRE ATT&CK, audits and compliance
• Experience with KQL, security automation, SIEM/SOAR and security operations
• Previous MSP experience highly preferred

Preferred certifications

• SC-100 – Microsoft Cybersecurity Architect
• SC-200 – Security Operations Analyst
• AZ-500 – Azure Security Engineer Associate
• ISO/IEC 27001 Lead Implementer / Lead Auditor