Cybersecurity Engineer – Microsoft Security, Defender, Entra ID & Purview
Posted 7
views
Square One Resources Cybersecurity Engineer – Microsoft Security, Defender, Entra ID & Purview
Summary
Mid-level cybersecurity engineer working in international teams to build, administer, and improve Microsoft-based security across cloud and on-premises environments. Day to day covers security monitoring, incident response, vulnerability management, IAM, and endpoint/cloud security using Defender XDR, Entra ID, Purview, Sentinel, and Azure.
Project Description
We are looking for a Mid-level Cybersecurity Engineer to join an international security engineering environment focused on the development, administration, and continuous improvement of Microsoft-based security solutions across cloud and on-premises environments.
The project covers a broad range of cybersecurity areas, including security monitoring, threat detection, incident response, vulnerability management, identity and access management, endpoint security, cloud security, and security automation.
The role will be particularly focused on advanced security capabilities within the Microsoft ecosystem, including Microsoft Defender, Microsoft Entra ID, Microsoft Purview, and Microsoft Sentinel.
You will work in international, cross-functional teams and contribute to large-scale cloud and cybersecurity transformation initiatives.
Recruitment Process
The recruitment process consists of three stages:
- Initial interview – approximately 60 minutes, online via MS Teams.
- Technical interview – approximately 60 minutes, including technical knowledge verification.
- Team interview + technical assessment – approximately 60 minutes, with the future team and additional technical verification.
Requirements
Must-have
- 3+ years of professional experience in Cybersecurity, Security Engineering, or Security Operations.
- Strong and practical knowledge of the Microsoft security ecosystem.
- Advanced knowledge of Microsoft Defender, including:
- Microsoft Defender XDR
- Microsoft Defender for Endpoint
- Microsoft Defender for Cloud
- Advanced knowledge of Microsoft Entra ID (Azure AD).
- Advanced knowledge of Microsoft Purview, including Data Loss Prevention (DLP) capabilities.
- Practical experience with Microsoft Sentinel and SIEM-based security monitoring.
- Strong understanding of Endpoint Security and modern antivirus/EDR solutions.
- Good understanding of Identity and Access Management (IAM).
- Knowledge of Zero Trust security principles.
- Experience with Security Monitoring and Incident Response.
- Understanding of Vulnerability Management processes and tools.
- Knowledge of Cloud Security, preferably within Microsoft Azure.
- Ability to investigate security incidents and analyze security events.
- Ability to work effectively in international, English-speaking, cross-functional teams.
Nice-to-have
- Experience with PowerShell and/or Python for security scripting and automation.
- Knowledge of security frameworks and standards such as:
- NIST
- ISO 27001
- CIS Controls
- Microsoft security certifications, particularly:
- SC-100 – Microsoft Cybersecurity Architect
- SC-200 – Microsoft Security Operations Analyst
- SC-300 – Microsoft Identity and Access Administrator
- Experience supporting large-scale cloud and security transformation projects.
- Experience with security automation and development of automated response mechanisms.
Technology Stack
- Microsoft Defender XDR – Advanced
- Microsoft Defender for Endpoint – Advanced
- Microsoft Defender for Cloud – Advanced
- Microsoft Entra ID – Advanced
- Microsoft Purview – Advanced
- Microsoft Sentinel – Advanced
- Microsoft Azure – Regular
- PowerShell / Python – Nice to have
- SIEM solutions
- Vulnerability Management tools