Microsoft Security Engineer

Role Summary

Key Responsibilities

• Administer and optimize Microsoft Entra ID (Azure AD) security controls including Conditional Access policies, MFA enforcement, Privileged Identity Management (PIM), and access reviews.
• Manage Microsoft Defender for Endpoint, Defender for Office 365, Defender for Cloud, and Defender for Cloud Apps — including alert tuning, policy configuration, and false-positive reduction.
• Monitor and investigate security alerts from Microsoft 365 security signals; perform triage, scoping, and escalation in coordination with the 24×7 SOC.
• Handle email security operations including phishing/BEC investigation, quarantine management, and submission workflows via Defender for Office 365.
• Conduct monthly Microsoft Secure Score reviews and drive posture improvement initiatives across identity, endpoint, email, and cloud workloads.
• Support DLP policy monitoring and tuning through Microsoft Purview (where enabled and delegated).
• Implement and document configuration changes through an agreed change management process with pre/post validation.
• Produce monthly operational reports covering alerts, incidents, security posture trends, and improvement backlogs.
• Collaborate with the SOC team on incident response coordination for P1/P2 Microsoft-related incidents, including evidence preservation and root cause analysis.
• Participate in security awareness initiatives and provide guidance on Microsoft 365 security best practices to internal stakeholders.

& Certifications

• Microsoft certification: SC-200 (Security Operations Analyst) or SC-300 (Identity and Access Administrator) or equivalent (mandatory).
• 3+ years of hands-on experience administering Microsoft 365 security services (Entra ID, Defender suite, Purview).
• Strong understanding of identity and access management concepts, Conditional Access design, and Zero Trust principles.
• Experience with email security (anti-phishing, anti-spam, safe attachments/links) and incident investigation workflows.
• Familiarity with SIEM/SOAR integration of Microsoft security signals and log forwarding.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Preferred Qualifications

• Additional certifications: AZ-500 (Azure Security Engineer), MS-500, or SC-400.
• Experience with Microsoft Sentinel or other cloud-native SIEM platforms.
• Exposure to hybrid identity environments (on-prem AD + Entra ID sync).
• Experience working in a Managed Security Services or SOC environment.
• Knowledge of compliance frameworks relevant to the UAE (e.g., NESA, Central Bank regulations).
• Pay: AED6,000.00 - AED8,000.00 per month