Microsoft Security Engineer (200)

Position Summary We are seeking a highly skilled and advanced technical cybersecurity professional, preferably a Microsoft MVP (Most Valuable Professional) to our Global Security Operations and Engineering team. The successful candidate will lead technical security initiatives, with a particular focus on Microsoft Cloud Security covering the full scope, i.e., to plan (architect), implement (build), and manage the security platforms and tools in use at WSP, especially the SOAR capabilities, including automation for the SOC using Microsoft security tools (Microsoft Sentinel, Defender, etc). An important part of this role would be to coach and build the overall knowledge and capabilities within the team. And so, naturally, the incumbent would be an integral member of the team and would also get some good insight into other technology platforms, e.g. AD auditing solutions, PAM, our Threat Intelligence platforms etc. This position can be located at any WSP USA office location.

Candidates MUST have: • Demonstrable, current, and verifiable technical skills with the Microsoft security tools, especially MS Sentinel, Defender, LogicApp. • Robust experiences with EntraID, AD, e.g., and creating and managing complex role creations, assignments and permissions • Experiences with Purview. • A proven, recent, and verifiable track record in improving and maturity existing security implementations and configurations in the Microsoft Cloud landscape • Substantial expertise implementing SIEM/ SOAR automations, developing and finetuning the SIEM detection rules to reduce manual efforts, including SIEM log ingestion, connector options, and cost analysis for current and future needs • Solid current experiences in securing the attack landscape in a Microsoft environment, and hardening the existing systems in the enterprise hybrid landscape (end-user devices, servers, etc); skills and experiences with other vendors and services would be an added advantage • Substantial expertise about the overall security landscape, including Threat and Vulnerability Management, and the ability to guide on their remediation. • Deep knowledge of EntraID, including identity protection, conditional access, zero trust architecture and advanced threat detection • Cyber professional at heart, tracking and mitigating emerging cyber threats against the company (e.g. zero-day exploits, APTs etc). • Experiences with other concepts and systems like Privileged Account Management, Key Management (certificates, keys, ciphers, etc.). • Ability to lead security systems integration, e.g., defining the architecture to work with ticketing systems, e.g. integrating Defender to create–manage the tickets and communications in ServiceNow • Knowledge of extracting relevant data, creating security reports etc. would be a definite advantage. • Solid abilities to lead and plan the architecture, deliveries, and even more importantly coach and teach other members of the technical team to high levels of technology excellence