Microsoft Security Engineer

About the role

EY is seeking a Microsoft Security Engineer to strengthen its security posture across the Microsoft 365 and Microsoft Security ecosystem. The role focuses on designing, implementing and optimizing Defender and Purview solutions while collaborating with IT, Cloud and Identity teams.

Key responsibilities

• Design, implement and optimise Microsoft Defender solutions, including Defender for Endpoint, Office 365, Identity and Cloud.
• Deploy and manage Microsoft Purview capabilities such as Information Protection (Sensitivity Labels) and Data Loss Prevention across Microsoft 365 workloads.
• Define and enforce security policies for Exchange Online, SharePoint Online, OneDrive and Microsoft Teams.
• Participate in security assessments, hardening activities and compliance initiatives.
• Collaborate with IT, Cloud and Identity teams to deliver end‑to‑end security solutions.
• Produce clear technical documentation for architecture, configurations and security decisions.

Required profile

• Bachelor’s degree in Computer Science, Engineering, IT, Mathematics or a related field, or equivalent work experience.
• Strong hands‑on experience with Microsoft Defender (Microsoft 365 Defender stack).
• Analytical and problem‑solving skills with the ability to communicate clearly to both technical and non‑technical stakeholders.

Required skills

• Microsoft Defender for Endpoint, Office 365, Identity and Cloud.
• Microsoft Purview Information Protection (Sensitivity Labels) and Data Loss Prevention.
• Security policy design for Exchange Online, SharePoint Online, OneDrive and Microsoft Teams.
• Microsoft Entra ID (Azure AD) security concepts.
• Basic understanding of Microsoft Sentinel.
• Relevant Microsoft certifications (e.g., SC‑200, SC‑300, SC‑400, MS‑500) – considered a plus.