M365 Security Engineer

M365 Security Engineer - JD

We are seeking an experienced M365 Security Engineer to design, implement, and maintain security controls across our Microsoft 365 environment. This role will be responsible for protecting our organization's cloud-based infrastructure, ensuring compliance with security policies, and responding to security incidents affecting Microsoft 365 services. The ideal candidate will have deep technical expertise in Microsoft security technologies and a strong understanding of enterprise security best practices.

M365 security is a critical initiative for Vertiv. The position requires the applicant to act like an owner. They are expected to take initiative, build and document processes, engage with business stakeholders. It will be required to work across multiple departments and business units to provide oversight and guidance to each business use case.

As an M365 Security Engineer, you will implement and manage security solutions across our Microsoft 365 ecosystem, including Entra, Exchange Online, SharePoint, Teams, Purview, and related services. You will implement and maintain Microsoft Defender suite products including Defender for Endpoint, Defender for Office 365, and Defender for Cloud Apps, working to detect and respond to security threats across our environment.

Your role will include managing identity and access management through Entra, implementing conditional access policies, managing privileged access, and integrating with our enterprise identity solution Entra. You will be responsible for configuring and maintaining Data Loss Prevention (DLP) policies, information protection and governance solutions, and ensuring sensitive data is properly classified and protected throughout its lifecycle.

Security monitoring and incident response will be central to your work. You will configure and tune security alerts, investigate suspicious activities, conduct threat hunting exercises, and coordinate response efforts for security incidents affecting M365 services. This includes working with Microsoft Purview for compliance monitoring, audit log analysis, and eDiscovery when needed for investigations.

You will collaborate with security operations, compliance teams, and application owners to ensure security controls are properly implemented without disrupting business operations. This includes evaluating new M365 features for security implications, participating in architecture reviews, and providing guidance on secure configuration practices.

Technical is required, as is familiarity with SIEM platforms and security monitoring tools. You should have.

Additional experience with enterprise security tools including would be advantageous. Knowledge of regulatory compliance requirements such as GDPR, HIPAA, or PCI-DSS and experience with security automation and orchestration tools or SOAR platforms would strengthen your candidacy.

• Degree in Engineering, Computer Science or a related discipline. Equivalent combination of course work and job experience
• 4-6 years’ experience working in an information security discipline
• 2-3 years’ experience working in M365 security administration
• Strong technical knowledge of Microsoft 365 security architecture
• Experience with Microsoft Defender suite, Entra security features, and Microsoft Purview compliance solutions
• Implementation and management experience around identity and access management solutions, including multi-factor authentication, conditional access policies, and privileged identity management
• Ability to conduct security assessments and implement remediation plans
• Strong proficiency with Power Shell scripting for automation and security management
• Experience and proficiency utilizing git for SCM
• Direct involvement with security incident response processes and demonstrated ability to analyze security logs and identify threats
• Excellent written and verbal communication skills with the ability to present complex technical information in a clear and concise manner to a variety of audiences
• Experience working with on-site and off-site development teams, coordinating work, expectations, and delivery.
• Ex…