Security Engineer jobs in Tel Aviv-Yafo

Overview We’re looking for an experienced and driven Senior Security Engineer to join our STORM security research group and help shape the security posture of Microsoft Specialized Cloud systems from the ground up. As part of our mission to embed security throughout the development lifecycle, you’ll lead security design reviews, threat modeling, and architectural security assessments across a wide range of technologies, from OS internals and virtualization to cloud platforms, containerized environments, application security, and AI-enabled systems. This role combines deep security engineering and architecture expertise with a forward-looking approach to AI-assisted security engineering. You’ll be expected to reason deeply about complex systems and review designs hands-on, while also using and building AI-powered capabilities that make security analysis more effective, scalable, and repeatable. This is a high-impact role for security engineers who thrive on technical depth, enjoy building, and want to influence secure design at scale. Responsibilities 🔍 What You’ll Do • Lead security design and architecture reviews and structured threat modeling engagements for complex systems. • Analyze systems and architectures to identify trust-boundary violations, architectural vulnerabilities, unsafe assumptions, and opportunities for security-driven redesign. • Partner closely with engineering and security teams to influence architecture early in the product lifecycle and guide teams toward secure design patterns. • Perform security analysis using a combination of deep manual investigation and AI-augmented workflows, applying engineering judgment to validate findings and challenge assumptions. • Design, prototype, and build AI-assisted security capabilities that augment design review, threat modeling, architecture analysis, vulnerability discovery, and other security engineering workflows. • Experiment with new approaches for combining security expertise, automation, and AI to improve the scale, depth, and consistency of security reviews. • Communicate security findings, design tradeoffs, and recommended mitigations clearly to both technical and non-technical stakeholders. • Drive security hardening and security-driven redesign efforts that address systemic weaknesses rather than individual vulnerabilities. • Help evolve our security engineering methodology, tooling, and practices as AI changes how both products and security analysis are built. Qualifications • Strong experience in security engineering, security architecture, or related technical security roles. • Deep technical knowledge in one or more of the following areas: • Operating system internals, including Windows/Linux, memory management, boot security, or platform security. • Virtualization, confidential computing, cloud architecture, or container security. • Containerized environments incl. Kubernetes and AKS • Application security and secure software development across services, APIs, and distributed systems. • Cloud-native security, including identity, secrets management, isolation, and service-to-service trust. • Experience building with modern AI technologies to solve real engineering or security problems and designing workflows where AI augments expert analysis 🌟 Preferred Qualifications • Expertise in structured threat modeling, architectural risk analysis, and reasoning about complex systems and trust boundaries. • Ability to prototype and build tools rather than only consume existing security tooling. • Experience integrating LLMs or AI agents with existing engineering workflows, tools, data sources, or analysis pipelines. • Experience applying AI to security problems such as threat modeling, design analysis, code analysis, vulnerability discovery, or security automation. • Understanding of security challenges introduced by AI-enabled systems and the ability to threat-model systems incorporating AI components. • Experience with scalable security analysis techniques, including static analysis, dynamic analysis, code analysis, or custom security automation. • Prior expertise and experience with Azure-based solutions and services • Strong understanding of secure coding and code review principles. 🤝 Leadership & Collaboration • Strong sense of ownership and responsibility. • Excellent communication skills, with the ability to articulate complex security issues and design tradeoffs clearly and persuasively. • Proven ability to lead cross-functional technical engagements and influence engineering teams without direct authority. • Analytical and curious mindset with a strong drive to understand how systems actually work. • Comfortable navigating ambiguity and working on problems where neither the security answer nor the engineering solution is predetermined. • Builder mindset: willing to experiment, prototype, iterate, and turn promising ideas into capabilities that other security engineers can use. 📈 Experience & Impact • 6+ years of experience in security engineering, architecture, software engineering, or related roles. • Demonstrated success leading security design reviews, threat modeling, or architectural security assessments for complex systems. • Track record of identifying and helping mitigate significant architectural or system-level security weaknesses. • Experience influencing engineering decisions and driving security improvements across organizational boundaries. This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Description We run Crown Coins, a high-traffic social gaming platform on AWS and GCP. You'll join the Platform team and own day-to-day security across our cloud, identity, edge and endpoints. You'll automate that work with AI, and work with engineering to stop bot abuse and fraud before it costs us money. Responsibilities • Cloud security (AWS + GCP): Enforce least-privilege IAM and org guardrails (SCPs and GCP org policies). Monitor and triage cloud security findings and audit logs. Harden our EKS clusters. • Identity and access: Run JumpCloud and Google Workspace as our identity layer: SSO, MFA, access reviews and device policies. • Edge protection: Own Cloudflare WAF, bot management, rate limiting and Zero Trust Access. Tune rules against signup bots, credential stuffing and abuse. • Browser and endpoint security: Manage Island Enterprise Browser policies, including DLP, data boundaries and access to sensitive admin tools. • Detection and response: Build alerts and write runbooks. Lead security incidents alongside SRE on-call, and follow through on post-incident fixes. • AI agents that triage security alerts, enrich them with context and suggest or apply a response Requirements • 2+ years in SecOps, cloud security, or SRE/DevOps with a strong security focus • Hands-on experience with AWS IAM and AWS security services, plus working knowledge of GCP • Admin experience with an identity provider (JumpCloud, Okta or Google Workspace), including SAML/OIDC SSO, MFA and SCIM • Experience with Cloudflare (WAF, rules, Zero Trust) or a comparable edge security platform • Terraform, Git and Python, plus hands-on experience building automation with LLMs or AI agents (such as Claude, OpenAI or MCP-based tools) Nice to have • Google Cloud Professional Cloud Architect certification • Island or another enterprise browser, or MDM tools • Kubernetes/EKS security: RBAC, network policies and image scanning • Fighting bots or fraud in gaming, fintech or e-commerce • SIEM or detection engineering experience • Other certifications such as AWS Security Specialty, Security+ or CCSK

Description Come join the company building the security operating model for the age of AI. AI has changed how data is used — and security must change with it. Cyera's mission is to empower businesses to accelerate AI Adoption by defining a holistic approach to securing AI - from data to access to model. Instead of perimeter controls and static policies, Cyera provides a unified control plane that understands relationships between data, access, and behaviors across humans, systems, and AI. Backed by the world's leading investors and working with a large and growing list of Fortune 1000 companies, we are looking for world-class talent to join us as we usher in the new era of data and AI security. About the Role Our customers trust Cyera with their most sensitive data, and we hold our own platform to the standard we set for the industry. We meet and exceed industry security standards, and we treat that as the baseline rather than the finish line. We're looking for an Application Security Lead to own product security inside R&D and be the focal point at Cyera for validating how secure our platform is. Your mandate is continuous assurance: proving, through hands-on adversarial testing and architecture-level review, that no gaps exist across our code, infrastructure, and architecture — and keeping it that way as we ship fast. You'll map our most sensitive areas, lead research and red team exercises against our own systems, run an internal bug bounty, define how R&D reasons about risk in development and production, and keep the engineering organization exercised and ready. This is a technical leadership role under Infrastructure, serving all of R&D and partnering closely with the Security organization, Product, and Engineering leadership. You'll start hands-on, with the mandate to build the function — and the team — around you. What you’ll do • Own product security end to end and be the trusted authority on Cyera's security posture for R&D leadership, the Security organization, and our customers — able to answer "how secure is our product?" with evidence. • Lead continuous adversarial validation of our code, infrastructure, and architecture, confirming the strength of authorization, tenant isolation, business logic, and every path to sensitive data. • Maintain a living map of Cyera's attack surface and sensitive data flows, and use it to focus assurance effort where the stakes are highest. • Run threat modeling and security architecture review for new services, integrations, cloud connectors, and multi-tenant components — early enough to shape the design. • Own multi-tenancy and customer data boundaries: tenant isolation, authorization logic, secrets and key handling, and the controls that keep every customer's data unreachable from any other. • Secure our AI and agentic surfaces — prompt injection, tool and agent authorization, and model and data boundaries for autonomous systems acting on customer data. • Lead red team exercises across production and pre-production, and run an internal bug bounty that puts Cyera engineers to work on our own code with real incentives and real follow-through. • Define risk management for our development and production environments: standards, severity models, security gates, and an exception process practical enough that teams follow it — and drive findings to verified, structural resolution. • Build the paved road for secure development: secure-by-default patterns and guardrails, SAST/DAST/SCA and secrets detection tuned so signal beats noise, and a security champions network across R&D. Scale assurance through automation and self-service rather than headcount. • Keep the engineering organization exercised and incident-ready — tabletop drills, detection and forensic coverage in our own environments, escalation paths, and runbooks. • Represent product security externally, supporting customer security reviews, questionnaires, third-party penetration tests, and CISO-level conversations alongside the Security organization. Requirements What You’ll Bring • 8+ years in application security or product security, including hands-on ownership of a security program. • Deep, current expertise in authentication and authorization, multi-tenant isolation, API and web security, cryptography and secrets management, software supply chain risk, and business logic vulnerabilities. • An attacker's mindset applied to systems you didn't build. You can read unfamiliar code, form a hypothesis about how it breaks, and prove it — and you can scope and direct red team work against your own organization. • Threat modeling and security architecture review as a practiced discipline, ideally at a scale serving many engineering teams at once. • Strong engineering background: you write code (Python, Go, TypeScript, Java, or similar), understand distributed systems, and hold credible design discussions with senior engineers. • Cloud-native security depth in AWS, GCP, or Azure — IAM, network boundaries, Kubernetes, containers, CI/CD security, and infrastructure-as-code — and comfort working shoulder-to-shoulder with DevOps and Infrastructure engineers. • Experience embedding security across the development lifecycle from design through deployment, including secure SDLC processes and developer-facing tooling. • Technical leadership without authority: driving security outcomes across engineering teams through credibility, clarity, and prioritization. Fluency in SOC 2, ISO 27001, or similar — enough to satisfy them efficiently, and the judgment to know where they stop. The judgment to separate real risk from theoretical risk, and to say so plainly to engineers and executives alike. Nice to have: • Experience at a cybersecurity startup, especially one where the product itself was the trust boundary. • Experience at a cloud-native SaaS company operating a multi-tenant platform at scale. • Experience in high-consequence data environments — payments, financial services, crypto, or healthcare. • Offensive security background: penetration testing, vulnerability research, exploit development, published CVEs, or service in an elite technology unit. • Experience building or running a bug bounty program. • Security experience with AI/ML systems, LLM applications, or agentic architectures — including using AI to scale security review itself. • Experience securing data platforms or pipelines processing large volumes of sensitive data. • Experience hiring, mentoring, and growing security engineers. • Contributions to the security community: research, open-source tooling, writing, or talks.

Description About Cyera Come join the company building the security operating model for the age of AI. AI has changed how data is used — and security must change with it. Cyera's mission is to empower businesses to accelerate AI Adoption by defining a holistic approach to securing AI - from data to access to model. Instead of perimeter controls and static policies, Cyera provides a unified control plane that understands relationships between data, access, and behaviors across humans, systems, and AI. Backed by the world's leading investors and working with a large and growing list of Fortune 1000 companies, we are looking for world-class talent to join us as we usher in the new era of data and AI security. About the Role Join our team as a Security Operations Engineer . You will own escalated investigations end to end, lead the response to moderate-scope incidents, and improve the detections, playbooks, and automations behind our agentic SOC. This is a role for someone who wants to spend more of their time improving the system than working the queue. You will also own a domain of our customer zero program, operating the Cyera platform in our own environment and turning operator experience into product feedback. You will also help newer Security Operations Engineers grow. You will join a team that is building a modern, AI-assisted SOC from the ground up at a fast-growing data and AI security company. Your work will directly shape how we detect and respond, how our agents operate, and how our product behaves. The ideal candidate has 2 to 4 years of experience in security operations or incident response, has led real incidents, writes production-quality Python, and is comfortable building and tuning detections. What you’ll do • Investigation Ownership: Own escalated investigations from triage to closure, including correlation, scoping, and remediation coordination. • Incident Response: Lead moderate-scope incidents, serve as a core responder on major incidents, and write after-action reports. • Detection Engineering: Build and tune detections across cloud, identity, SaaS, and endpoint telemetry, with test cases and documented rationale. • SOC Automation: Improve agent workflows, enrichment, and playbooks, and measure the effect on autonomous handling and time to resolution. • Customer Zero: Own a domain of our internal Cyera deployment: posture goals, remediation with data owners, and prioritized product feedback. • Threat Hunting: Run hypothesis-driven hunts and convert findings into detections or automations. • Mentorship: Review the work of newer Security Operations Engineers, pair on investigations, and help them build engineering habits. What You’ll Bring • Experience: 2 to 4 years in security operations, incident response, or detection engineering. • Incident Response: Experience leading or co-leading incidents, including containment decisions and post-incident write-ups. • AWS Knowledge: Working knowledge of AWS security services, IAM, logging, and common cloud attack paths. • AWS Certification: AWS Certified Cloud Practitioner required; Security Specialty or Solutions Architect Associate preferred. • Python: Hands-on proficiency, with automation others rely on. • SIEM and Detection: Experience building, tuning, and maintaining detections and investigating from raw logs. • Communication: Can write a clear incident report and brief a non-technical stakeholder. Nice to have: • AI Workflows: Hands-on work with LLM applications, agent frameworks, or AI-assisted security operations. • Detection Languages: Sigma, SQL, KQL, SPL, YARA, or similar. • Data Security: Experience with DSPM, DLP, or data access governance. • Infrastructure as Code: Terraform, CloudFormation, or CDK. • Certifications: GCIH, GCIA, GCFA, AWS Security Specialty, or similar.

Description About Cyera Come join the company building the security operating model for the age of AI. AI has changed how data is used — and security must change with it. Cyera's mission is to empower businesses to accelerate AI Adoption by defining a holistic approach to securing AI - from data to access to model. Instead of perimeter controls and static policies, Cyera provides a unified control plane that understands relationships between data, access, and behaviors across humans, systems, and AI. Backed by the world's leading investors and working with a large and growing list of Fortune 1000 companies, we are looking for world-class talent to join us as we usher in the new era of data and AI security. About the Role Join our team as a Senior Application Security Engineer. You will be a senior technical leader in the application security program, working with R&D teams to build security into how we design, build, and ship our products. You will report to the Head of Application Security and act as the technical lead for some of the program’s most important workstreams. You will help build a modern product security program that uses automation, pipeline integration, and AI-assisted workflows rather than manual review alone. You will turn standards into guardrails engineers can use, find and fix real risk in our code and architecture, and make secure development the easy path. The ideal candidate has 6–9 or more years of cybersecurity experience, including at least 4 years in application security, strong software engineering skills, and a record of influencing engineering teams and mentoring other engineers. We are looking for someone who is credible in the code, clear in their communication, and focused on outcomes. What You’ll Do • Code and Design Review: Review high-risk code and designs, and help engineers fix issues at the root rather than one finding at a time. • Pipeline Security: Build and tune security checks in CI/CD, including static and dynamic analysis, dependency and container scanning, and secrets detection, with a focus on accuracy and low noise. • Vulnerability Triage and Remediation: Triage and prioritize vulnerabilities by real risk, work with engineering owners to drive remediation, and track progress against service levels. • Software Supply Chain: Improve visibility and control of third-party and open-source dependencies, including SBOM generation and accuracy. • Automation and AI: Develop automation and AI-assisted workflows for triage, code review, and reporting that remove manual work and scale the team. • Security Testing Partnership: Work with the offensive security team and perform penetration tests and bug bounty reports, and turn findings into fixes and better standards. • Product Security Incidents: Support the PSIRT process by analyzing reported vulnerabilities, assessing impact, and helping engineering ship and communicate fixes. • Standards and Enablement: Contribute to secure coding standards, guardrails, and a paved road for engineers, and run training or office hours that make teams more self-sufficient. • Mentorship and Technical Leadership: Mentor Security Engineers, review their work, and lead workstreams and projects across R&D with limited supervision. • Agentic AppSec Fleet: Design, build, and run a fleet of AI agents that take on AppSec work at scale, such as triaging scanner findings, validating exploitability, reviewing pull requests and designs for security issues, drafting threat models, proposing fixes, and routing vulnerabilities to the right owners. Define the guardrails, human approval points, evaluation methods, and audit trail that keep agent output accurate, safe, and trusted by engineers, and report the impact on risk and review capacity. What You’ll Bring • Experience: 6–9 or more years in cybersecurity, security engineering, or software engineering, including at least 4 years in application or product security. • Application Security Depth: Strong knowledge of common vulnerability classes, secure design, threat modeling, and authentication and authorization in cloud-native, API-driven applications. • Software Engineering Skills: Strong programming skills in at least one language such as Python, Go, Java, or TypeScript, and the ability to review other engineers’ code for security issues. • Security Tooling: Hands-on experience with application security tools, including SAST, SCA, DAST, and secrets scanning, and with integrating them into CI/CD pipelines. • Cloud and Containers: Working knowledge of at least one major cloud provider and of securing containerized workloads. • Influence: Track record of working with engineering teams to get security work prioritized and done. • Mentorship: Track record of developing other engineers. • Communication: Clear written and verbal communication with engineers, product teams, and senior leaders. Nice to Have • AI and Agentic Security: Experience securing LLM-based features and agent systems, including prompt injection and data exposure risks. • Offensive Security Skills: Experience in penetration testing, vulnerability research, or bug bounty work. • Software Supply Chain: Experience with SBOM tooling, dependency management, and build integrity. • Infrastructure and Cloud Posture: Familiarity with Terraform, Kubernetes security, and cloud posture tooling. • Certifications: OSCP, CSSLP, GIAC, or similar.

Description Shape the Future of AI Infrastructure with VAST Data This is a rare opportunity to join one of the fastest-growing infrastructure companies in tech history, right at the epicenter of the AI revolution. Recognized by Forbes as "the future of the market," VAST Data is building the foundational enterprise software powering the AI era. We engineer platforms that capture, catalog, refine, and protect massive datasets across data centers, edge, and cloud, making real-time analytics, AI training, and inference simpler and faster than ever before. Our explosive growth is fueled by relentless engineering innovation, a customer-first mindset, and a team of fearless VASTronauts who thrive on solving computing's hardest problems. Join us at this pivotal moment in technology history and make a lasting impact on how the world processes data. We are looking for a hands-on, forward-thinking Security Engineer to join our growing security team. In this role, you will lead offensive security initiatives, build internal automation using modern workflows and AI agents, and manage cloud and infrastructure risks. You will conduct penetration tests across our architecture, analyze deep protocol flaws, write custom tooling, and take security findings from discovery all the way to resolution. Requirements Core Responsibilities: • Penetration Testing & AI Automation: Conduct comprehensive penetration tests across all components of our architecture—ranging from Web APIs down to S3 protocols—and design systems to automate routine pentesting using AI tools. • Protocol & Flaw Analysis: Leverage a deep understanding of network and application protocols to identify architectural and implementation flaws, using AI prompts and modern tooling to uncover edge-case security risks. • Tooling & Process Automation: Write custom internal security tools and leverage AI agents to automate repetitive tasks, incident responses, and continuous security workflows. Secondary Responsibilities: • Cloud Security Monitoring: Monitor and manage cloud security posture using CNAPP (Cloud-Native Application Protection Platform) tools, maintaining oversight of our cloud infrastructure and containerized environments. • Vulnerability Management & Remediation: Run and maintain regular SAST and DAST scans across operating systems, Docker containers, and source code. Own security findings from discovery through code remediation and validation. • Jira & Delivery Tracking: Manage, prioritize, and promote security Jira tickets through the full lifecycle—from initial triage and assignment through to final delivery and verification. • Software Supply Chain Security: Generate, analyze, and manage Software Bill of Materials (SBOMs) to track third-party dependencies and address supply-chain vulnerabilities. Qualifications & Skills Required Qualifications: • Offensive Security & Pentesting: Solid background in penetration testing covering APIs, microservices, cloud storage protocols (S3), and distributed network architectures. • Protocol & Code Analysis: Strong knowledge of underlying network and storage protocols with a demonstrated ability to uncover implementation flaws. Familiarity with C/C++ source code is a distinct advantage for low-level analysis and AI prompt engineering. • AI Integration: Experience or strong interest in leveraging AI agents and prompt engineering to automate security scanning, triage, and security research. Preferred Qualifications (Advantage): • Development & Automation: Proficiency in scripting/programming (Python, Go, or Bash) to build internal security tools, integrate APIs, and automate workflows. • Cloud Security Expertise: Hands-on experience with CNAPP, CSPM, or CWPP solutions in public cloud environments (AWS, GCP, or Azure). • Application & Infrastructure Security: Demonstrated experience with SAST/DAST tools, container security (Docker/Kubernetes), OS hardening, and secure code review. • Process & Ticket Lifecycle Management: Strong organizational skills to manage security backlogs, triage tickets in Jira, and collaborate cross-functionally with engineering teams to drive remediation to delivery.

Description Quantum Machines (QM) is a global leader in control systems for quantum computing, a field on the verge of exponential growth. Our innovative hardware and software mark a groundbreaking approach in quantum computer control, scaling from individual qubits to expansive arrays of thousands. At the core of QM lies a passionate and ambitious team committed to reshaping the construction and operation of quantum computers. Our work is fueled by a deep understanding of customer needs, driving us to deliver unparalleled solutions in this revolutionary field. We are seeking a highly experienced Microsoft 365 Cloud Security Engineer to own the administration, configuration, and security of our enterprise Microsoft 365 tenant(s). The ideal candidate has proven hands-on expertise managing Microsoft 365 at scale, including Intune, Exchange Online, SharePoint/OneDrive, Teams, Entra ID, Defender, and related integrations You will play a key role in ensuring availability, governance, identity and access control, endpoint compliance, and modern security posture across the entire Microsoft cloud ecosystem, with close collaboration across IT, Security, and business stakeholders. Key Responsibilities Microsoft 365 Tenant Administration • Administer and maintain enterprise-scale M365 tenants, including configuration, governance, and operational support. • Oversee service health, usage reporting, licensing, and user lifecycle management. • Maintain documentation of configurations, workflows, and operational procedures. Microsoft Intune / Endpoint Management (Full Scope) • Own all aspects of Intune administration, including: • Device enrolment (Windows, macOS, iOS/iPadOS, Android) • Configuration profiles, compliance policies, and security baselines • Autopilot provisioning, device naming policies, and lifecycle • Conditional Access integration with device compliance • Endpoint security policies (AV, firewall, ASR rules, BitLocker, etc.) Identity & Access Management (Entra ID / SSO) • Manage and secure Microsoft Entra ID (Azure AD) for identity, authentication, and access governance. • Configure and maintain SSO integrations with SaaS applications using SAML/OAuth/OIDC. • Implement and optimize: • Conditional Access policies • MFA enforcement and authentication methods policy • Privileged Identity Management • Identity Protection policies (risk-based controls) Security & Threat Protection • Deploy and manage Microsoft Defender stack relevant to the organization • Integrate and manage endpoint security posture with non-Microsoft EDR platforms, such as Sentinel One/CrowdStrike • Collaborate with Security teams to implement detection and response workflows, ensure coverage, and align with organizational policy. Messaging & Collaboration Exchange Online • Administer Exchange Online policies and configurations • Implement email security best practices and support incident response when needed. Microsoft Teams • Administer Teams policies and governance - Teams lifecycle policy, app permissions, meeting policies; External access and guest collaboration settings SharePoint / OneDrive • Administer SharePoint Online and OneDrive settings, including: • Site governance, permissions, and sharing controls • Sensitivity labels and information protection controls (if used) • Sync and storage management, auditing and access policies Azure & Cloud Infrastructure • Support Azure identity, security, and basic cloud resources relevant to M365 integrations. • Manage Azure configuration related to: • Entra ID integrations • Conditional Access • Hybrid identity (if applicable) • Azure security settings and monitoring Policy, Compliance, and Governance • Implement and maintain governance models across identity, endpoint, data sharing, and collaboration tools. • Support compliance initiatives, audits, and reporting needs. • Maintain secure tenant configurations aligned with best-practice frameworks (e.g., CIS, Microsoft Secure Score, NIST). Requirements Required Qualifications • 3-5 years of hands-on experience administering Microsoft 365 in an enterprise environment. • Proven expertise managing Intune (full end-to-end: enrolment → policy → deployment → compliance → reporting), Exchange Online, SharePoint Online / OneDrive, Microsoft Teams, Microsoft Entra ID, Conditional Access policies • Strong understanding of email security fundamentals and implementations: Transport rules, threat policies, anti-phishing controls SPF, DKIM, DMARC; experience integrating M365 security posture with non-Microsoft EDR/XDR tools • Strong troubleshooting capability across identity, endpoint, collaboration, and security layers. • Experience in scripting/automation • Experience with Microsoft Defender for Endpoint/Office 365/Cloud Apps. Key Skills & Competencies • Enterprise cloud administration mindset (scale, governance, standardization) • Strong security-first approach • Ability to translate business needs into practical policies • Comfortable owning production-critical services • Excellent communication and cross-functional collaboration • Structured documentation and operational discipline Preferred Skills Strong plus • Experience with Microsoft Purview (DLP, retention, sensitivity labels, eDiscovery) • Familiarity with Zero Trust architecture and modern security frameworks. • Knowledge of SIEM integrations (Microsoft Sentinel, Splunk, etc.).