Job highlights

- Implement Conditional Access policies,multi-factor authentication (MFA),password less authentication strategies,and identity protection measures to enhance security posture
- Preferred Certifications . Microsoft Certified: Security Operations Analyst (SC-200)
- Microsoft Certified: Azure Security Engineer (AZ-500)
- Experience in implementing CIS Benchmarks and Controls

JD- Microsoft Security Skilled The Microsoft Security Specialist plays a crucial role in safeguarding and optimizing the organization s digital environment. This position requires expertise in Microsoft Security, including the design, implementation, and management of security services in Microsoft Cloud Security, Cybersecurity (aligned with CIS controls), and On-Premises Security. Candidates should have hands-on experience securing Microsoft 365 and Azure environments, as well as traditional on-premises infrastructures, to ensure comprehensive protection, compliance, and resilience. Collaboration with cross-functional teams is essential for assessing systems and improving endpoint management and access controls. The successful candidate will contribute to a global practice focused on designing and deploying holistic Microsoft security solutions, including preparing requests for proposals (RFP) and requests for information (RFI).

Key Responsibilities

1. Microsoft Cloud Security (Azure Cloud & Microsoft 365)

- Architect and implement cloud security frameworks within Azure, adhering to Zero Trust principles to minimize risk.
- Secure Azure resources, encompassing subscriptions, management groups, and tenants with robust governance measures.
- Oversee the deployment and management of security solutions, including:
- Microsoft Defender for Cloud for protection across Azure environments.
- Microsoft Defender for Endpoint, Identity, Office 365, and Cloud Apps to ensure endpoint and identity security.
- Microsoft Sentinel for comprehensive SIEM and SOAR capabilities.
- Establish and enforce compliance through Azure Policy, Blueprints, and Role-Based Access Control (RBAC) to maintain access integrity.
- Safeguard cloud workloads across various services such as Virtual Machines, App Services, Containers, Azure Kubernetes Service (AKS), Storage, and Databases.
- Implement Conditional Access policies, multi-factor authentication (MFA), password less authentication strategies, and identity protection measures to enhance security posture.
- Conduct Cloud Security Posture Management (CSPM) and initiate remediation efforts to address vulnerabilities and align with best practices.

2. Identity & Access Management (IAM)





- Design and manage the architecture of Microsoft Entra ID (formerly known as Azure AD).
- Implement Hybrid Identity using AD Connect or Cloud Sync.

- Manage the following
- Privileged Identity Management (PIM, PAM)
- Identity Governance, including Access Reviews and Entitlement Management
- Secure service principals and managed identities
- Monitor and respond to identity-based attack

3) On-Premises Security

- Fortify Active Directory Domain Services (AD DS).
- Implement Active Directory hardening measures, including:
- Tiered admin model for access control

- Principle of least privilege
- Secured Group Policy Objects (GPOs)

- Secure on-premises infrastructure, including Windows/Linux servers, file servers, and applications.
- Deploy endpoint security through Microsoft Defender for Endpoint.
- Establish patch management protocols with WSUS and Microsoft Endpoint Manager.
- Enhance network security with firewalls, segmentation, secure DNS implementation, and VPN integration.

4) Endpoint, Email & Collaboration Security

- Ensure security for Windows, macOS, and mobile devices via Microsoft Intune.
- Enforce device compliance, configuration profiles, and security baselines.
- Safeguard email and collaboration platforms such as Exchange Online, SharePoint, and Teams.
- Configure protective measures including anti-phishing, anti-spam, Safe Links, and Safe Attachments.

5) Cybersecurity & CIS Controls

- Implement and maintain CIS Benchmarks for:
- Azure environments

- Microsoft 365
- Windows Server and Client operating systems

- Align security controls with CIS Critical Security Controls (v8).
- Conduct risk assessments and security gap analyses.
- Maintain comprehensive security documentation, standards, and Standard Operating Procedures (SOPs).

Monitoring, Incident Response & Threat Management

- Design and manage Microsoft Sentinel use cases, develop analytics rules, and create playbooks.
- Lead investigations of security incidents and manage response actions.
- Conduct threat hunting and forensic analysis to identify vulnerabilities.
- Collaborate with Security Operations Centre (SOC), IT, and business stakeholders for cohesive security management.
- Compliance,



Governance & Risk
- Ensure compliance with standards such as:
- ISO 27001

- NIST

- CIS
- GDPR and relevant regional regulations

- HIPPA Regulations

- Implement data protection strategies using Microsoft Purview covering:

- Data Loss Prevention (DLP)
- Information Protection using Sensitivity Labels

- Data Lifecycle Management

- Perform internal audits followed by remediation planning as necessary.

Automation & Continuous Improvement

- Automate security operations utilizing:

- PowerShell

- Azure Logic Apps

- Kusto Query Language (KQL)
- Enhance security posture through continuous monitoring and optimization efforts.
- Stay informed on Microsoft security roadmap updates and the evolving threat landscape.

Required Skills & Competencies

Technical Skills

- Proficient in Microsoft 365 Security & Compliance frameworks.
- Advanced understanding of Azure Security & Networking architectures.
- Hands-on experience with Microsoft Defender suite and Microsoft Sentinel.
- In-depth knowledge of Active Directory and Hybrid Identity management.
- Experience in implementing CIS Benchmarks and Controls.
- Strong scripting capabilities, particularly with PowerShell.

Soft Skills

- Exceptional analytical and problem-solving proficiency.
- Clear and effective communication and documentation skills.
- Ability to collaborate with cross-functional teams.
- A proactive mindset emphasizing security-first principles.

Experience Requirements

- 8 12 years of experience in IT Security, specifically focused on Microsoft Security environments.
- Proven track record in managing hybrid Microsoft infrastructures.
- Experience in security operations, governance, and compliance frameworks.

Preferred Certifications

- Microsoft Certified: Security Operations Analyst (SC-200)
- Microsoft Certified: Identity and Access Administrator (SC-300)
- Microsoft Certified: Information Protection Administrator (SC-400)
- Microsoft Certified: Azure Security Engineer (AZ-500)
- CISSP, CISM, or CCSP (preferred).
- Familiarity with CIS Benchmarks or ISO 27001 standards.

Reporting & Stakeholder Interaction

- Reports to: Head of Security / CISO
- Collaborates closely with: IT Infrastructure, Cloud Services, SOC, Compliance, and Business Teams.

Key Performance Indicators (KPIs)

- Reduction in the number of security incidents.
- Improvement in overall compliance posture.
- Measurement of Mean Time to Respond (MTTR) for incidents.
- Security score enhancements via Defender and Secure Score evaluations.

📌 Security Engineer (Pune)
🏢 Han Digital Solution
📍 Pune