Senior Security Engineer – M365 E5 Security, Compliance & Data Protection

About the role

Join PwC's Cyber Security Tech team as a Senior Security Engineer focused on Microsoft 365 E5 security, compliance, and data protection. You will design, implement, and optimise security solutions that safeguard identities, data, and collaboration platforms for our clients.

Key responsibilities

• Implement and optimise Microsoft 365 E5 security and compliance solutions, including Defender XDR, Purview, and Entra ID features.
• Develop and maintain security policies across Exchange Online, SharePoint Online, and Teams.
• Configure DLP, Information Protection, sensitivity and retention labels, and eDiscovery policies.
• Deploy Microsoft Defender for Cloud Apps (or equivalent CASB) to monitor user activity and enforce real‑time session controls.
• Collaborate with compliance, legal, and data‑governance teams to define classification taxonomies and map them to security controls.
• Implement MFA, Conditional Access, Identity Protection, Privileged Identity Management, and Just‑in‑Time access.

Required profile

• Bachelor's degree in Computer Science, Cybersecurity, IT or a related field.
• Minimum 3 years of hands‑on security engineering experience with Microsoft 365 E5.
• Strong knowledge of Microsoft Defender XDR, Purview, Entra ID, and Conditional Access.
• Experience with data classification, DLP, insider risk management, and regulatory compliance.
• Understanding of Zero Trust, IAM, and RBAC principles.

Required skills

• Microsoft 365 E5 security & compliance
• Microsoft Defender XDR (Endpoint, Identity, Office 365, Cloud Apps)
• Microsoft Purview (DLP, Insider Risk, Information Protection)
• Entra ID (Azure AD) & Conditional Access
• Microsoft Defender for Cloud Apps (MCAS)
• MFA, Conditional Access, Identity Protection, PIM, JIT access
• DLP, sensitivity & retention labels, eDiscovery
• Exchange Online, SharePoint Online, Teams
• Zero Trust, RBAC
• Microsoft Secure Score, cloud‑native security operations