Microsoft Security Engineer with expertise in Microsoft 365 (M365) - Riyadh, Saudi Arabia

Role Summary:
We are looking for a Microsoft Security Engineer with expertise in Microsoft 365 (M365) security to design, implement, and manage enterprise security solutions across Microsoft cloud environments. The ideal candidate will ensure the protection of identities, data, servers and endpoints while optimizing security configurations in Microsoft Defender, Azure Security, and other M365 security solutions.

Required Skills & Qualifications
• 5+ years of experience in Microsoft 365 Security, Azure Security, or Cloud Security Engineering.
• Expertise in Microsoft Defender XDR, Defender for Endpoint and Defender for Office 365
• Hands-on experience with Azure AD security features, including Conditional Access, MFA, PIM, and RBAC.
• Strong knowledge of Microsoft Intune (Endpoint Manager) and Windows security configurations.
• Experience with Data Loss Prevention (DLP), Information Protection, and compliance frameworks.
• Proficiency in PowerShell scripting for automation and security configurations.
• Familiarity with Microsoft Graph API and security integrations.

Preferred Certifications
• Microsoft Certified: Cybersecurity Architect Expert
• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• Microsoft Certified: Information Protection Administrator Associate (SC-400)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft 365 Certified: Enterprise Administrator Expert

Education
• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Security, or a related field (or equivalent experience).

Key Responsibilities
M365 Security Implementation & Management
• Configure and manage Microsoft Defender for Endpoint, Office 365, Identity, and Cloud Apps to detect and prevent threats.
• Implement and maintain Microsoft Purview Compliance solutions (DLP, Insider Risk Management, Information Protection, eDiscovery).
• Secure Microsoft 365 services such as Exchange Online, SharePoint, OneDrive, and Teams by enforcing security policies.

Identity & Access Management (IAM)
• Deploy and manage Azure AD Conditional Access, MFA, Privileged Identity Management (PIM), and role-based access controls (RBAC).
• Configure and maintain Microsoft Entra ID security features to prevent unauthorized access.
• Implement / operate password less authentication, Single Sign-On (SSO), and Just-in-Time (JIT) access controls.

Threat Detection
• Monitor and analyze security alerts using Microsoft Sentinel (SIEM), Defender XDR, and Microsoft Security Center.
• Investigate security incidents, respond to threats, and perform root cause analysis.

Compliance & Risk Management
• Conduct security assessments and audits to identify vulnerabilities and mitigate risks.
• Implement Data Loss Prevention (DLP) policies to protect sensitive data across Microsoft 365 services.

Endpoint & Cloud Security
• Deploy and manage Microsoft Intune (Endpoint Manager) for device security, compliance, and application control.
• Enforce Windows Defender security baselines, BitLocker encryption, and Microsoft Edge security configurations.
• Harden Microsoft cloud workloads and ensure Azure Security Center best practices are followed.