Cybersecurity Engineer – Microsoft Security, Defender, Entra ID & Purview

The position is with Square One Resources in an international security engineering environment focused on the development, administration, and continuous improvement of Microsoft-based security solutions across cloud and on-premises environments. The project covers a wide range of cybersecurity areas including security monitoring, threat detection, incident response, vulnerability management, identity and access management, endpoint security, cloud security, and security automation.

• 3+ years of professional experience in Cybersecurity, Security Engineering, or Security Operations.
• Strong and practical knowledge of the Microsoft security ecosystem.
• Advanced knowledge of Microsoft Defender including Microsoft Defender XDR, Defender for Endpoint, and Defender for Cloud.
• Advanced knowledge of Microsoft Entra ID (Azure AD).
• Advanced knowledge of Microsoft Purview including Data Loss Prevention (DLP) capabilities.
• Practical experience with Microsoft Sentinel and SIEM-based security monitoring.
• Strong understanding of Endpoint Security and modern antivirus/EDR solutions.
• Good understanding of Identity and Access Management (IAM).
• Knowledge of Zero Trust security principles.
• Experience with Security Monitoring and Incident Response.
• Understanding of Vulnerability Management processes and tools.
• Knowledge of Cloud Security, preferably within Microsoft Azure.
• Ability to investigate security incidents and analyze security events.
• Ability to work effectively in international, English-speaking, cross-functional teams.

Nice to have:

• Experience with PowerShell and/or Python for security scripting and automation.
• Knowledge of NIST, ISO 27001, and CIS Controls security frameworks and standards.
• Microsoft security certifications: SC-100, SC-200, SC-300.
• Experience supporting large-scale cloud and security transformation projects.
• Experience with security automation and development of automated response mechanisms.

• Design, implement, configure, and continuously improve Microsoft security solutions across cloud and on-premises environments.
• Manage and develop Microsoft Defender XDR, Defender for Endpoint, and Defender for Cloud capabilities.
• Develop and maintain security monitoring and detection capabilities using Microsoft Sentinel and SIEM solutions.
• Create, tune, and optimize detection rules, alerts, and security policies.
• Monitor security events, investigate suspicious activities, and support incident detection and response.
• Participate in incident response activities, including investigation, containment, and remediation.
• Support security investigations and forensic analysis when required.
• Develop and maintain Data Loss Prevention (DLP) policies and controls, particularly within Microsoft Purview.
• Configure and optimize Microsoft Purview security and compliance capabilities.
• Support Endpoint Security and advanced antivirus/EDR protection, including Microsoft Defender for Endpoint.
• Work with Microsoft Entra ID to support Identity and Access Management, authentication, authorization, and access controls.
• Contribute to the implementation of Zero Trust security principles.
• Support vulnerability management activities, including vulnerability identification, assessment, prioritization, and remediation.
• Contribute to Cloud Security initiatives within Microsoft Azure environments.
• Develop scripts and automation using PowerShell and/or Python where applicable.
• Collaborate with security, infrastructure, cloud, and application teams in an international environment.
• Contribute to the continuous improvement of security processes, standards, and technical controls.
• Support large-scale cloud and cybersecurity transformation projects.