Security Engineer, Data

External Job Ad

Applied Systems is seeking an Infrastructure Security Engineer with deep expertise in the Microsoft Defender and Purview security ecosystems to design and operate our data protection and endpoint security infrastructure. You'll own the deployment and optimization of Microsoft Purview data governance and DLP, and Cloud App Security (CASB) capabilities across our Microsoft 365 environment. This role is perfect for an engineer who specializes in data security and has built real expertise with Microsoft's modern security stack, you'll work on high-impact initiatives around data classification, breach prevention, compliance automation, and endpoint threat response. You'll have the autonomy to own specific security domains while collaborating with cross-functional teams and incident response.

Responsibilities

Design, implement, and maintain security controls across the Microsoft Defender suite and data protection platforms

Design and deploy Microsoft Purview solutions including data classification, labeling, DLP, information barriers, and records management

Implement and manage Microsoft Purview Compliance Manager and audit logging for regulatory compliance

Design and maintain data security controls including Data Loss Prevention (DLP), encryption, and classification strategies

Conduct security reviews and threat modeling of data flows and information governance models

Implement and optimize Microsoft Cloud App Security (CASB) capabilities for SaaS application security and visibility

Develop and maintain runbooks for data breach procedures and incident response involving Defender and Purview solutions

Contribute to security monitoring, detection tuning, and alerting across Defender and Purview platforms

Assist with proof-of-concept builds for new Microsoft Defender and Purview capabilities

Participate in the Security Engineering Team on-call rotation

Requirements

Minimum of 3 years experience in security engineering or data security, with hands-on work with Microsoft security products

Advanced hands-on experience with modern DLP solutions

Demonstrated experience designing and implementing Microsoft Purview solutions for data governance and compliance

Working knowledge of Data Loss Prevention (DLP) design, policy creation, and tuning across email, Teams, and endpoints

Strong understanding of data classification and sensitivity labeling strategies in Microsoft 365 environments

Experience with Microsoft Cloud App Security (CASB) or equivalent CASB technologies for SaaS visibility and control

Advanced knowledge of Windows and/or macOS operating systems, particularly regarding Defender for Endpoint agent deployment and management

Experience with one or more scripting languages (PowerShell, Python, Bash, C#)

Knowledge of encryption technologies and key management in Microsoft 365 context

Understanding of audit logging, threat intelligence integration, and advanced hunting in Defender platforms

Knowledge of compliance frameworks and their application in cloud environments (SOC 2, HIPAA, GDPR, PCI-DSS)

Demonstrated ability to work with systems at scale

Excellent written and verbal communication skills

Strong problem-solving abilities and attention to detail

Preferred Qualifications

Hands-on experience with Microsoft Purview Compliance Manager and regulatory compliance automation

Working knowledge of Microsoft Entra ID (formerly Azure AD) integration with Defender and Purview solutions

Familiarity with Azure infrastructure (Azure Firewall, Network Security Groups, etc.)

Experience with infrastructure-as-code technologies (Terraform, ARM templates, Bicep)

Microsoft security certifications (Security Engineer, Enterprise Administrator, or similar)

Experience with SIEM/SOAR integration with Microsoft Defender solutions