M365 Security Engineer

Job Summary

Support configuration and maintenance of sensitivity labels label policies IRM settings and Microsoft Purview DLP rules based on predefined requirements.

Manage operational tasks related to Data Lifecycle Management including applying retention policies retention labels and updating governance workflows.

Monitor audit logs Log Analytics data and compliance alerts; prepare reports and escalate issues following documented procedures.

Operate and update automated workflows (Logic Apps Power Automate) to ensure proper triggering notifications and remediation actions.

Handle security and compliance tickets including triage documentation resolving standard operational tasks and escalating complex cases.

Communicate with internal customers to provide updates clarify technical steps gather required information and support operational processes.

Provide investigation support by retrieving audit data performing Content Searches exporting logs and preparing required information for incident analysis and compliance reviews.

5 6 years of experience in IT operations security operations Microsoft 365 administration or Microsoft Purview.

Hands-on experience with Microsoft Purview Information Protection DLP policies retention labels and Purview tools.

Practical experience with IRM (Information Rights Management)

Ability to use Content Search for investigations data retrieval and compliance inquiries.

Strong proficiency with KQL (Kusto Query Language) for Log Analytics auditing and reporting.

Experience interpreting audit logs compliance alerts and security events.

Experience with automation tools such as Logic Apps and Power Automate.

Strong operational mindset with attention to detail and ability to follow established workflows.

Experience handling tickets and communicating effectively with internal customers.

Can have:

Experience with Adaptive Scopes in enterprise environments.

Familiarity with ServiceNow Jira or similar ITSM systems.

Basic scripting skills (PowerShell Graph API automation).

Experience working with Microsoft Sentinel for monitoring or investigation tasks.

Experience with Power BI for reporting dashboards and data visualization.

Experience with Power Apps to support light operational applications or workflow enhancements.

Microsoft Certifications such as SC-400 SC-900 or MS-500.