Email & Endpoint Security Engineer
Core
Design, implement, and optimize Microsoft Defender for Office 365 and Microsoft Defender for Endpoint to protect enterprise email and endpoint environments.
Role type
Microsoft O365 Defender Email & Endpoint Security Engineer
Builds
Email security policies, endpoint detection & response (EDR) configurations, and security automation workflows
Domain
Cybersecurity, Cloud Security (Microsoft 365/Azure)
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Microsoft Defender for Office 365, Microsoft Defender for Endpoint, Microsoft 365 Security & Compliance Center, Azure AD/Microsoft Entra ID, email authentication (SPF/DKIM/DMARC), Endpoint Detection & Response (EDR), Attack Surface Reduction (ASR), Kusto Query Language (KQL), PowerShell, Intune/SCCM
Preferred skills
Microsoft security certifications (SC-200, SC-300, MS-500), Microsoft Sentinel integration, security automation, Zero Trust architecture, vulnerability management
Technologies
Microsoft Defender for Office 365, Microsoft Defender for Endpoint, Microsoft Sentinel, KQL, PowerShell, Intune, SCCM
Responsibilities
Implement and maintain email security policies (anti-phishing, anti-spoofing, Safe Links, Safe Attachments); Configure email authentication controls (SPF, DKIM, DMARC); Deploy and manage endpoint security features including EDR and ASR rules; Engineer and tune detection rules to reduce noise while maintaining threat coverage; Integrate Defender solutions with SIEM platforms; Develop detection logic using KQL; Support automation workflows using PowerShell and security APIs
Seniority
Mid-Senior, hands-on IC
