VHC Health

Purpose & Scope:

The Senior Information Security Engineer – Microsoft 365 Security will serve as the subject matter expert (SME) for securing the organization’s Microsoft 365 environment. This role will design, implement, and manage advanced cloud security configurations across Microsoft Defender, Purview (DLP, Information Protection, Insider Risk), Entra ID (Azure AD), and Exchange Online Protection. The engineer will ensure sensitive data is classified and protected, phishing attempts are reduced, and M365 platforms meet compliance, security, and business needs.

Bachelor's degree in computer science or in a related field is required. Master's degree is preferred.

Education:

Bachelor’s degree in Cybersecurity, Computer Science, or related field is required.

Master's degree is preferred.

Equivalent work experience considered in lieu of education requirement.

Experience:

• 5+ years of experience in cybersecurity engineering, with 3+ years focused on Microsoft 365 security.
• Strong hands-on expertise with:
• Microsoft Defender XDR Suite (Endpoint, Office 365, Identity, Cloud Apps)
• Microsoft Purview (DLP, Information Protection, Insider Risk, eDiscovery)
• Entra ID (Azure AD) including conditional access, identity protection, and MFA
• Exchange Online Protection and security policies
• Solid understanding of data classification, DLP, phishing mitigation, and cloud security best practices.
• Experience supporting compliance-driven environments (HIPAA, ISO, NIST).

Certification/Licensure:

Industry certifications are preferred.