- Experience in scripting (mandatory), Exposure to Security Automation

- Shift Timing : 2:00 PM - 11:00 PM

- Cab facility provided, no shift allowance

Work Mode : Hybrid (3 days office)

Location : Hyderabad - RMZ Space, Nexity

Education : B.E / B. Tech (no civil engineering)

Job Description :

We are seeking a Microsoft O365 Defender Email & Endpoint Security Engineer to support the design, implementation, and optimization of Microsoft security technologies that protect enterprise email and endpoint environments. This role focuses on engineering, configuration, and continuous improvement of Microsoft Defender for Office 365 and Microsoft Defender for Endpoint to strengthen the organizations cybersecurity posture. The ideal candidate will have hands-on experience implementing security controls, tuning detection capabilities, and partnering with security operations teams to improve threat detection and response.

Key Responsibilities :

1. Microsoft Defender for Office 365 (Email Security Engineering) :

- Implement and maintain Microsoft Defender for Office 365 security policies, including anti-phishing, anti-spoofing, Safe Links, Safe Attachments, and anti-malware protections.

- Configure and optimize email authentication and protection controls such as SPF, DKIM, and DMARC.

- Engineer and tune policies to detect and prevent phishing, business email compromise (BEC), and malicious attachments.

- Develop and maintain email threat protection standards and configurations.

- Partner with Security Operations teams to improve detection rules and remediation workflows.

- Support attack simulation training campaigns and security awareness initiatives.

2. Microsoft Defender for Endpoint (Endpoint Security Engineering) :

- Deploy and configure Microsoft Defender for Endpoint capabilities across enterprise endpoints.

- Implement and manage endpoint security features including :

a. Endpoint Detection & Response (EDR)

b. Attack Surface Reduction (ASR) rules

c. Web and network protection

d. Device control policies

e. Endpoint vulnerability management

- Engineer and maintain endpoint security baselines and hardening standards.

- Tune detection rules and alerts to reduce noise while maintaining strong threat coverage.

- Assist with investigation and remediation of endpoint security incidents when needed.

3. Platform Engineering & Security Integration :

- Integrate Defender solutions with Microsoft Sentinel or other SIEM platforms.

- Develop queries and detection logic using Kusto Query Language (KQL).

- Support automation and response workflows using PowerShell and Microsoft security APIs.

- Maintain documentation for configurations, engineering standards, and operational procedures.

- Collaborate with infrastructure, cloud, and identity teams to implement Zero Trust security controls.

Required Qualifications :

- Bachelors degree in Cybersecurity, Computer Science, Information Systems, or related field (or equivalent experience).

- 5- 7 years of cybersecurity or security engineering experience.

- Hands-on experience with :

a. Microsoft Defender for Office 365

b. Microsoft Defender for Endpoint

c. Microsoft 365 Security & Compliance Center

d. Azure AD / Microsoft Entra ID security features

- Strong understanding of email security technologies (SPF, DKIM, DMARC).

- Experience working with endpoint protection and EDR platforms.

- Familiarity with KQL or similar query languages for threat detection.

- Experience with endpoint management tools such as Intune or SCCM.

Preferred Qualifications :

- Microsoft security certifications (SC-200, SC-300, MS-500, or similar).

- Experience integrating Microsoft Defender with Microsoft Sentinel.

- Experience with security automation using PowerShell.

- Knowledge of Zero Trust security architecture.

- Familiarity with vulnerability management tools and processes.

Key Competencies :

- Strong technical problem-solving skills

- Ability to design and improve security configurations

- Detail-oriented with strong documentation practices

- Effective collaboration with security operations and infrastructure teams

- Ability to balance security protection with operational usability