Microsoft 365 Security Engineer - onsite Plano

Welltower Careers • Plano, TX

12d • Onsite

About The Position

Welltower is seeking a Microsoft 365 Security Engineer to engineer and operationalize security capabilities across email, identity, endpoint detection, and data protection. This role is a key engineering partner within Digital Workspace, helping translate workspace technology strategy into scalable, secure-by-design Microsoft 365 controls and operational standards. The position partners closely with Digital Workspace, Security Operations, Messaging/Infrastructure, and Endpoint teams to implement secure collaboration, strengthen control effectiveness, and improve operational maturity. It is intentionally focused on Microsoft 365 security engineering rather than broader workplace technology domains such as telephony, print, digital signage, or physical security.

Requirements

• 5–7+ years of experience in Microsoft 365 security engineering within a complex enterprise environment.
• Deep expertise in Microsoft Defender, Exchange Online security and mail flow, Microsoft Purview, and core identity security controls.
• Experience implementing enterprise security baselines, secure configuration standards, and policy-driven controls at scale.
• Strong understanding of incident response workflows, control validation, and operational governance across Microsoft 365 platforms.
• Ability to translate security and compliance requirements into practical engineering solutions in partnership with security, infrastructure, and workplace technology teams.
• Employment is contingent upon the successful completion of a background check, drug screening, and verification of employment, education, and other credentials relevant to the position.

Responsibilities

• Engineer and optimize core Microsoft 365 email security capabilities, including Defender for Office 365, Exchange Online Protection, and anti-phishing controls.
• Design secure mail flow, enforce best practices, and implement policy-driven protections across inbound, outbound, and internal messaging.
• Develop and maintain secure configuration standards for email protection, spoofing prevention, and user-facing collaboration controls.
• Lead technical response and continuous improvement efforts for phishing, business email compromise, and related messaging threats.
• Engineer, tune, and support Microsoft Defender capabilities, including Defender for Endpoint and Defender for Cloud Apps, with a focus on scalable enterprise deployment.
• Partner with endpoint engineering to align device posture, compliance signals, and Defender telemetry with Conditional Access and Zero Trust objectives.
• Improve detection fidelity, reduce false positives, and strengthen operational readiness through repeatable engineering standards and control validation.
• Collaborate with Security Operations on incident response, threat hunting, and continuous improvement of endpoint and cloud threat protections.
• Design, implement, and manage Microsoft Purview capabilities, including Data Loss Prevention, sensitivity labeling, classification, Insider Risk, and eDiscovery.
• Translate business and compliance requirements into scalable technical controls that support governance, data handling standards, and secure collaboration.
• Develop and maintain policy-aligned protection standards for sensitive information across Microsoft 365 workloads.
• Partner with stakeholders to validate control effectiveness, support investigations, and continuously improve information protection maturity.
• Support and help operationalize identity security controls, including Conditional Access, MFA/passwordless strategies, Privileged Identity Management, and secure access governance.
• Partner on lifecycle-oriented identity standards that improve authentication strength, reduce administrative risk, and support least-privilege access.
• Ensure engineering decisions align with Zero Trust architecture, enterprise security baselines, and broader Digital Workspace standards.
• Contribute to operational metrics, service improvements, and platform maturity initiatives across Microsoft 365 security services.
• Document engineering standards, technical decisions, implementation guidance, and supportable operational procedures.
• Partner across Digital Workspace, Security, Infrastructure, and service providers to improve reliability, policy enforcement, and control effectiveness.
• Support continuous improvement through automation, standardization, and repeatable engineering practices.

Benefits

• Competitive Base Salary + Annual Bonus
• Generous Paid Time Off and Holidays
• Employee Stock Purchase Program – purchase shares at a 15% discount
• Employer-matching 401(k) Program + Profit Sharing Program
• Student Debt Program – we’ll contribute up to $10,000 towards your student loans!
• Tuition Assistance Program
• Comprehensive and progressive Medical/Dental/Vision options
• Professional Growth
• And much more!

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed