Manager - M365, Purview DLP, CASB, and CrowdStrike

Summary:

This individual will be responsible for managing enterprise security operations, and continuous improvement of Microsoft 365 security controls (primarily focused on Purview DLP and CASB) and CrowdStrike. The role focuses on securing enterprise platforms, protecting sensitive information, preventing data exfiltration, and strengthening cloud and endpoint security posture across enterprise environments.

Key Responsibilities:

Microsoft Purview & Data Protection

• Design, implement, and manage enterprise-wide Microsoft Purview DLP
• Develop and maintain DLP policies across:
• Exchange Online
• Microsoft Teams
• SharePoint Online
• OneDrive
• Endpoint DLP

Implement data classification, sensitivity labels, auto-labeling, and information protection strategies (based on requirements from the Data Governance team).

Monitor and prevent sensitive data exfiltration across endpoints, email, and cloud platforms.

Optimize DLP controls and CASB policies to reduce false positives through policy tuning.

Review security metrics, dashboards, and compliance reports.

Monitor and investigate DLP policy violations and data exfiltration attempts

Microsoft CASB

• Lead implementation, administration, and optimization of Microsoft Defender for Cloud Apps (CASB).
• Secure SaaS applications and monitor Shadow IT activities.
• Configure API-based and session-based controls for cloud application visibility and protection.
• Implement cloud application governance, adaptive access controls, and Zero Trust security policies.
• Develop and enforce cloud access policies for managed and unmanaged devices.
• Perform CASB policy tuning, risk assessment, and remediation activities.

CrowdStrike

• Manage CrowdStrike Falcon platform across enterprise endpoints.
• Configure Falcon Prevent, Falcon Insight, Falcon Discover, Device Control, and Identity Protection modules.
• Manage endpoint detection and response (EDR) operations.
• Support SOC investigations (if required / if escalated) to investigate malware, ransomware, and advanced threat activities.

Required Qualifications:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 7+ years of experience in Microsoft Security technologies, Purview DLP, CASB, and CrowdStrike.
• Preferred Certifications
• Experience integrating DLP, CASB, EDR, and SIEM solutions.
• Microsoft Information Protection Administrator (SC-400)
• Microsoft Security Operations Analyst (SC-200)
• Microsoft 365 Security Administrator Associate
• CrowdStrike Falcon Administrator