Senior Security Engineer – M365 E5 Security, Compliance & Data Protection

About the role

PwC is looking for a Senior Security Engineer to join its Cyber Security Tech team in Athens. You will implement and optimise Microsoft 365 E5 security and compliance solutions, develop security policies and controls, and work with compliance, legal and data governance teams to protect user identities, sensitive data and collaboration environments.

Key responsibilities

• Implement and optimise Microsoft 365 E5 security and compliance, including Microsoft Defender XDR (Endpoint, Identity, Office 365, Cloud Apps), Microsoft Purview (DLP, Insider Risk, Information Protection) and Entra ID security features.
• Develop and maintain security policies and controls across the M365 ecosystem to protect identities, sensitive data, email and collaboration (Exchange Online, SharePoint Online, Teams).
• Configure DLP, Information Protection, sensitivity and retention labels, and eDiscovery policies for regulatory compliance.
• Implement Microsoft Defender for Cloud Apps or a similar CASB to monitor user activity, detect anomalies and enforce session controls for sanctioned and unsanctioned SaaS apps.
• Work with compliance, legal and data governance teams to define classification taxonomies mapped to security controls in Microsoft Purview.
• Implement MFA, Conditional Access, Identity Protection, Privileged Identity Management (PIM) and Just-in-Time (JIT) access.

Required profile

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology or a related field.
• At least 3 years of experience in security engineering, with hands-on deployment and management of Microsoft 365 E5 security and compliance features.
• Experience in data classification, data loss prevention, insider risk management and regulatory compliance controls using M365.
• Strong English and Greek verbal and writing skills.
• Certifications are a plus.

Required skills

• Microsoft Defender XDR suite, Microsoft Purview, Entra ID and Conditional Access
• Microsoft Defender for Cloud Apps (MCAS)
• Data classification, DLP, insider risk management and regulatory compliance controls
• Identity and access management, Zero Trust principles and RBAC
• Cloud-native security operations, Microsoft Secure Score and M365 service health monitoring

What we offer

• Hybrid working model
• Local and global career opportunities
• Continuous learning and professional certifications
• Extra leave days and wellness initiatives