Senior Microsoft Security Administrator

6 days, 14 hours ago
Full-time
Mid Level
DevOps and Infrastructure
Al Watania Information Systems

Al Watania Information Systems

Al Watania Information Systems specializes in providing integrated business solutions and information systems, particularly as a SAP partner in Saudi Arabia, to assist organizations in achieving their goals through effective digital transformation stra...

Internet Software & Services
51-250
Founded 2002

Description

  • Configure and maintain Entra ID security controls including Conditional Access, MFA, PIM, and Identity Protection.
  • Manage Microsoft Defender for Endpoint and Intune policies for device compliance, ASR, EDR, and automated remediation.
  • Oversee Defender for Office 365 protections including Safe Links, Safe Attachments, anti-phishing, anti-spam, and quarantine triage.
  • Implement and monitor Purview controls such as DLP, Sensitivity Labels, and Information Barrier policies.
  • Monitor shadow IT and manage app permissions and session policies in Defender for Cloud Apps.
  • Maintain and optimize log ingestion into Microsoft Sentinel from M365, Entra ID, Defender XDR, firewalls, and cloud infrastructure.
  • Write and update KQL analytics rules, hunting queries, and workbooks/dashboards.
  • Build and maintain Logic Apps playbooks to automate incident response and threat containment.
  • Perform Tier 2/3 triage, investigation, and root-cause analysis on security alerts.
  • Review Secure Score, coordinate vulnerability remediation, handle escalated security tickets, and maintain runbooks, diagrams, and monthly reporting.

Requirements

  • 3+ years of hands-on experience administering Microsoft 365 security features in an E5 / Defender XDR environment.
  • 3+ years of experience configuring and operating Microsoft Sentinel.
  • Strong proficiency in KQL (Kusto Query Language) for logs, investigations, and analytics rules.
  • Experience with Microsoft Intune (MDM/MAM) for Windows endpoint management.
  • Solid understanding of PowerShell for M365 scripting and security automation.
  • Knowledge of networking basics, including DNS, firewalls, and VPNs.
  • Knowledge of cloud identity fundamentals, including Entra ID, SAML, and SSO.
  • Preferred certification: Microsoft Certified: Identity and Access Administrator Associate (SC-300).
  • Preferred certification: Microsoft Certified: Information Protection and Governance Administrator Associate (SC-400).
  • Highly desirable certification: Microsoft Certified: Security Operations Analyst Associate (SC-200).
  • Preferred certification: Microsoft Certified: Cybersecurity Architect Expert (SC-100).

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Security Engineer

Hummingbird 1K-5K Professional Services

Hummingbird is hiring a Senior Security Engineer to own and strengthen security for its remote-first SaaS platform that helps financial institutions fight financial crime.

AWS Azure CircleCI Docker Encryption GraphQL JavaScript Network Security PostgreSQL Python React Redis Ruby Ruby on Rails Terraform TypeScript
1 day, 13 hours ago

Principal IAM Engineer Consultant

Kalles Group 11-50 Internet Software & Services

Kalles Group is hiring a remote Principal IAM Engineer Consultant to lead engineering design and delivery for a customer identity and access management platform in a highly regulated financial services environment.

DevSecOps Microservices REST API SAML
2 days, 13 hours ago

Senior Security Research Engineer

PlayStation 100K+ Household Durables

Sony Interactive Entertainment is hiring a Senior Security Research Engineer to lead Global Vulnerability Management efforts that advance its Threat Exposure Management program and strengthen security risk reduction across the PlayStation ecosystem.

Bash CI/CD Domo Git JavaScript PowerShell Python Snowflake SQL
2 days, 14 hours ago

Senior Capabilities Developer

Dragos 251-1K Professional Services

Dragos is hiring a Senior Capabilities Developer to build and maintain the Synapse-based threat intelligence infrastructure that powers analysis and reporting for critical infrastructure cybersecurity.

2 days, 14 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers