Microsoft Security Engineer
Location: MM Alam Road, Lahore
Salary: Competitive, based on experience
Experience: Relevant experience in an MSP environment is preferred
About the Role
We are looking for an experienced Microsoft Security Engineer to manage, monitor, and strengthen security across Microsoft 365, endpoints, cloud, identity, and data environments.
The ideal candidate will have strong hands‑on experience with Microsoft Defender, Microsoft Sentinel/SentinelOne, Microsoft Entra ID, Microsoft Purview, Azure Security, security licensing, and ISO/IEC 27001 . Experience working in an MSP environment will be highly preferred.
Key Responsibilities
- Manage and secure the Microsoft Defender XDR ecosystem, including Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps, and Defender for Cloud.
- Manage Microsoft Sentinel and SentinelOne , including SIEM/SOAR, KQL, threat hunting, security monitoring, automation, and incident response.
- Manage Microsoft Entra ID security , including Conditional Access, MFA, PIM, Identity Protection, RBAC, Access Reviews, and privileged access.
- Manage Microsoft Purview capabilities, including DLP, Information Protection, Sensitivity Labels, eDiscovery, Insider Risk Management, retention, and data governance.
- Implement and maintain Azure security controls , including Defender for Cloud, Azure Policy, Key Vault, NSGs, Private Endpoints, and RBAC.
- Conduct vulnerability management, security assessments, attack-surface reduction, security hardening, and remediation activities.
- Implement and maintain Zero Trust, least-privilege access, identity governance, encryption, and data security controls .
- Monitor Microsoft Secure Score and develop plans to continuously improve the organization’s security posture.
- Review and manage Microsoft security licenses, subscriptions, security features, and license utilization .
- Lead security incident response, root-cause analysis, remediation, and post-incident improvement activities.
- Develop and maintain security policies, standards, technical baselines, incident response procedures, and technical documentation.
- Support ISO/IEC 27001 initiatives, including risk assessments, ISMS requirements, internal and external audits, evidence collection, compliance activities, and remediation.
- Provide security recommendations, technical guidance, and support to IT teams and management.
- Collaborate with internal teams and clients to identify security risks and implement appropriate security solutions.
Required Skills & Experience
- Strong hands-on experience with Microsoft Defender, Microsoft Sentinel, SentinelOne, Microsoft Entra ID, Microsoft Purview, Microsoft 365, and Azure Security .
- Strong understanding of IAM, MFA, PIM, Conditional Access, RBAC, DLP, and data protection .
- Experience in threat hunting, security monitoring, incident response, vulnerability management, and security hardening .
- Working knowledge of ISO/IEC 27001, ISMS, Zero Trust, MITRE ATT&CK, risk management, audits, and compliance .
- Experience with KQL, security automation, SIEM/SOAR, and security operations .
- Strong troubleshooting, analytical, documentation, and communication skills.
- Ability to work effectively in a fast-paced environment and manage multiple security priorities.
- Previous experience working in an MSP environment is highly preferred.
Preferred Certifications
- SC-100 - Microsoft Cybersecurity Architect
- SC-200 - Security Operations Analyst
- AZ-500 - Azure Security Engineer Associate
- ISO/IEC 27001 Lead Implementer / Lead Auditor
#J-18808-Ljbffr
