Senior Security Engineer – M365 E5 Security, Compliance & Data Protection

About the role

We are looking for a Senior Security Engineer to lead the implementation and optimisation of Microsoft 365 E5 security, compliance and data‑protection solutions. You will work with cutting‑edge Microsoft technologies to safeguard identities, data and collaboration platforms for our clients.

Key responsibilities

• Implement and optimise Microsoft 365 E5 security suite, including Microsoft Defender XDR, Microsoft Purview and Entra ID features.
• Develop and maintain security policies across Exchange Online, SharePoint Online and Teams.
• Configure DLP, Information Protection, sensitivity and retention labels, and eDiscovery policies to meet regulatory requirements.
• Deploy Microsoft Defender for Cloud Apps (or equivalent CASB) to monitor user activity and enforce real‑time session controls.
• Collaborate with compliance, legal and data‑governance teams to define classification taxonomies and map them to security controls.
• Implement MFA, Conditional Access, Identity Protection, Privileged Identity Management and Just‑in‑Time access.

Required profile

• Bachelor’s degree in Computer Science, Cybersecurity, IT or a related field.
• Minimum 3 years of hands‑on security engineering experience with Microsoft 365 E5 security and compliance features.
• Strong knowledge of Microsoft Defender XDR, Microsoft Purview, Entra ID and Conditional Access.
• Experience in data classification, DLP, insider‑risk management and regulatory compliance using M365.
• Understanding of Zero Trust, identity and access management, and RBAC.
• Familiarity with cloud‑native security operations, Microsoft Secure Score and service health monitoring.
• Relevant Microsoft certifications are a plus.

Required skills

• Microsoft Defender XDR (Endpoint, Identity, Office 365, Cloud Apps)
• Microsoft Purview (DLP, Insider Risk, Information Protection, Compliance Manager)
• Entra ID (Azure AD) and Conditional Access
• Microsoft Defender for Cloud Apps (MCAS)
• Multi‑Factor Authentication (MFA)
• Privileged Identity Management (PIM)
• Just‑in‑Time (JIT) access
• Data Loss Prevention (DLP) and Information Protection (MIP)
• Sensitivity labels, retention labels, eDiscovery
• Exchange Online, SharePoint Online, Teams