Technology Specialist- Microsoft

Job Description

Microsoft Purview (Information Protection & Compliance)

• Design, implement, and manage Microsoft Purview components:
• Information Protection (MIP): Labels, sensitivity labels, auto-labeling, encryption, and DLP policies.
• Data Lifecycle Management (DLM): Retention, records management, and disposition.
• Data Loss Prevention (DLP): Endpoint, Exchange, SharePoint, OneDrive, Teams DLP configuration and tuning.
• Insider Risk Management (IRM): Policy creation, alert analysis, and case management.
• Communication Compliance: Configure and monitor policies for inappropriate or regulated content.
• eDiscovery & Audit: Manage Core and Advanced eDiscovery cases, legal holds, and audit logs.
• Information Barriers: Configure policies to enforce ethical walls and prevent data leaks.
• Perform data classification, discovery, and governance across on-premises, cloud, and third-party repositories.
• Collaborate with compliance, legal, and risk teams for regulatory alignment (GDPR, HIPAA, NIST, ISO 27001).

Microsoft Defender for Endpoint (MDE)

• Manage and optimize Defender for Endpoint (MDE) across Windows
• Analyze and respond to advanced endpoint alerts, incidents, and behavioral detections in Microsoft 365 Defender portal.
• Implement attack surface reduction (ASR) rules, EDR, and AV policies via Intune or GPO.
• Integrate MDE with Microsoft Sentinel, Defender for Identity, and Defender for Cloud Apps (MCAS).
• Conduct advanced hunting using Kusto Query Language (KQL) and generate custom detections.
• Coordinate with the Threat Response Team for endpoint containment, isolation, and remediation.
• Tune policies and detections to reduce false positives and improve endpoint security posture.

Job Requirements

Microsoft Purview (Information Protection & Compliance)

• Design, implement, and manage Microsoft Purview components:
• Information Protection (MIP): Labels, sensitivity labels, auto-labeling, encryption, and DLP policies.
• Data Lifecycle Management (DLM): Retention, records management, and disposition.
• Data Loss Prevention (DLP): Endpoint, Exchange, SharePoint, OneDrive, Teams DLP configuration and tuning.
• Insider Risk Management (IRM): Policy creation, alert analysis, and case management.
• Communication Compliance: Configure and monitor policies for inappropriate or regulated content.
• eDiscovery & Audit: Manage Core and Advanced eDiscovery cases, legal holds, and audit logs.
• Information Barriers: Configure policies to enforce ethical walls and prevent data leaks.
• Perform data classification, discovery, and governance across on-premises, cloud, and third-party repositories.
• Collaborate with compliance, legal, and risk teams for regulatory alignment (GDPR, HIPAA, NIST, ISO 27001).

Microsoft Defender for Endpoint (MDE)

• Manage and optimize Defender for Endpoint (MDE) across Windows
• Analyze and respond to advanced endpoint alerts, incidents, and behavioral detections in Microsoft 365 Defender portal.
• Implement attack surface reduction (ASR) rules, EDR, and AV policies via Intune or GPO.
• Integrate MDE with Microsoft Sentinel, Defender for Identity, and Defender for Cloud Apps (MCAS).
• Conduct advanced hunting using Kusto Query Language (KQL) and generate custom detections.
• Coordinate with the Threat Response Team for endpoint containment, isolation, and remediation.
• Tune policies and detections to reduce false positives and improve endpoint security posture.Role & responsibilities

Preferred candidate profile