Security Engineer (Microsoft Defender)
About The Position
UltraViolet Cyber is hiring a Senior Microsoft Cloud Security Engineer to deploy, manage, and harden its Microsoft cloud environment, including Azure, Office 365, and Microsoft 365. The role calls for deep expertise securing Microsoft cloud platforms, an analytical mindset, and comfort working with complex security challenges. The engineer will collaborate with security engineers, cloud architects, identity teams, and incident response analysts to keep the tenant resilient, compliant, and mission ready. The position serves as the subject matter expert for Microsoft cloud security architecture and implementation. It includes developing and enforcing Conditional Access Policies, optimizing Microsoft Defender products, implementing Microsoft Purview capabilities, and creating and optimizing KQL queries for security analytics. The engineer also reviews and remediates security controls and advises cross-functional teams on security, compliance, policy, and governance practices. The role requires the ability to obtain a DHS EOD Public Trust Clearance and participation in a rotating on-call schedule for incident response or outage support. The listed salary range is $110,000–$115,000 per year.
Requirements
- Ability to obtain DHS EOD Public Trust Clearance.
- Master’s degree plus 10 years of experience, or bachelor’s degree plus 13 years of experience, or 19 years of total experience.
- Expert-level hands-on experience deploying, managing, and securing Azure, Entra, Defender, Purview, Office 365, and Microsoft 365 in large enterprises.
- Deep understanding of Conditional Access Policies, Azure AD/Entra, and Zero Trust principles.
- Proven track record implementing and managing the Microsoft Defender ecosystem and Microsoft Purview, including DLP, sensitivity labels, and eDiscovery.
- Advanced proficiency writing KQL for detection, investigation, response, and reporting.
- An active expert-level certification, such as Microsoft Certified Solutions Expert (MSCE), Microsoft 365 Admin Expert, Microsoft Cybersecurity Architect Expert, AZ-900, AZ-500, SC-900, SC-100, SC-200, SC-300, SC-400, or SC-401.
- Security+ cybersecurity certification.
- Strong networking, firewall, VPN, and segmentation knowledge as it relates to cloud deployments.
- Exceptional time-management, writing, and communication skills.
- Availability to participate in a rotating on-call schedule for incident response or outage support.
Nice To Haves
- CISSP, OSCP, or GCIH certification.
- Familiarity with or certification in ITIL, Agile, or PMP.
- Experience with SOAR platforms such as Splunk or Microsoft Sentinel.
- Hands-on exposure to third-party cloud security tooling, such as CASBs, CNAAPs, or SD-WANs.
- Previous consulting or client-facing delivery experience.
Responsibilities
- Serve as the subject matter expert for securing the Microsoft cloud tenant and advise on architecture, design, and implementation across Azure, Office 365, and Microsoft 365.
- Develop and enforce Conditional Access Policies aligned with best practices for access control across personas, groups, and applications.
- Optimize Microsoft Defender for Endpoint, Defender for Cloud, Defender for Identity, and Defender for Office 365.
- Implement Microsoft Purview capabilities, including data classification, sensitivity labels, Data Loss Prevention (DLP), and eDiscovery workflows.
- Design, run, and optimize Kusto Query Language (KQL) queries for Azure Sentinel, Defender, and log analytics.
- Review and remediate security controls through vulnerability assessments, penetration tests, and red/blue team engagements.
- Guide cross-functional teams on security controls, compliance requirements, policy, and governance best practices.
- Participate in a rotating team on-call schedule to provide incident response or support during outages.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
