REMOTE Cyber Security Engineer

Required Skills & Experience

• 5+ years of cybersecurity experience, with a strong focus on Microsoft security technologies.
• Deep hands-on knowledge of Microsoft 365 security.

Strong experience with Microsoft Purview and data protection/security.

• Experience with Data Security Posture Management (DSPM).
• Strong experience with Microsoft Azure security.
• Experience with Microsoft Intune.
• Experience with the Microsoft Defender security suite / EDR.
• Experience implementing DLP, sensitivity labels, encryption, and data retention policies.

Nice to Have Skills & Experience

• Microsoft Certified: Cybersecurity Architect Expert certification or equivalent Microsoft security certification.
• Experience with Microsoft Sentinel.
• Additional hands-on experience with Microsoft Purview and Microsoft compliance tools.
• Experience supporting large enterprise-scale Microsoft environments.
• Experience working in a hybrid cloud environment.
• Previous experience in healthcare or another highly regulated industry.
• Knowledge of regulatory/security frameworks such as HIPAA, HICP, NIST, and ISO 27001.
• Experience integrating Microsoft security tools with CASB, SOAR, SIEM, ServiceNow, CMDB, email gateways, or threat intelligence platforms.
• Experience working with architectural review boards.
• Experience creating solution design documents, security architecture blueprints, executive dashboards, and capability roadmaps.

Job Description

The Cyber Security Engineer will be responsible for designing, implementing, and managing enterprise security solutions across the Microsoft ecosystem, with a strong focus on data protection. This person will help protect sensitive company information across Microsoft 365, Purview, Azure, Intune, Windows endpoints, and other Microsoft security technologies.

This individual will work closely with Infrastructure, IAM, GRC, Cloud Architecture, Privacy, Compliance, and other teams to identify security risks, implement controls, and improve the organization's overall data protection program.

Responsibilities:

• Design, implement, recommend, and troubleshoot security controls across Microsoft 365, Microsoft Purview, DSPM, Azure, Intune, Microsoft Defender/EDR, Power Platform, and Windows Server.
• Design and manage Data Loss Prevention (DLP), sensitivity labeling, encryption, and data retention policies across the Microsoft 365 ecosystem.
• Review existing security controls and architecture and recommend improvements or replacements using Microsoft security technologies.
• Design and implement security policies using Microsoft Entra ID, Conditional Access, Purview, DSPM, Defender, and Power Platform.
• Integrate Microsoft security technologies with enterprise security platforms including CASB, SIEM, SOAR, ServiceNow, CMDB, email gateways, and threat intelligence platforms.
• Monitor security logs and assist with security incidents, investigations, and forensic activities.
• Monitor the health, deployment, connectivity, and data quality of security technologies across thousands of enterprise assets.
• Partner with other security and technology teams on threat modeling, vulnerability assessments, and incident response.
• Support security and compliance requirements including NIST, ISO 27001, and HIPAA.
• Create and maintain security architecture documentation, operational procedures, dashboards, reporting, and technology roadmaps.
• Lead enterprise security technology implementations and deployments involving both technical and leadership teams.
• Provide technical mentorship and training to other engineers.
• Participate in security architecture and infrastructure reviews.
• Stay current on Microsoft's evolving security technologies and recommend improvements to the organization's security program.

Compensation:

$125,000.00 to $130,000.00 per year annual salary.

Exact compensation may vary based on several factors, including skills, experience, and education. Benefit packages for this role may include healthcare insurance offerings and paid leave as provided by applicable law.