Information Security Systems Engineer: M365 & Zero Trust

VaporVM; Dubai; On-site; AED 180,000 - 260,000; Full time

Job summary

VaporVM is seeking an Information Security Systems Engineer to own the day-to-day engineering and tuning of core security platforms. The role focuses on Microsoft 365 E5 workloads, DLP, PAM, WAF, and Zero Trust controls, delivering hands-on security analysis and threat detection support.

Responsibilities include configuring Defender, Purview, and Entra ID; maintaining Exchange/SharePoint security baselines; threat monitoring; DLP policy design; PAM management; and incident response coordination

Qualifications

• Bachelor's degree in information technology, computer science, cybersecurity, or related field.
• 4–7 years hands-on information security engineering or security operations experience.
• Hands-on admin of Microsoft 365 E5 security workloads (Defender, Purview, Entra ID).
• Practical experience with DLP, PAM, and WAF platforms in production.
• Knowledge of Zero Trust and Conditional Access concepts.
• Familiarity with SIEM, log analysis, and incident triage.
• Automation scripting experience (PowerShell, KQL, Python) is a plus.

Responsibilities

• Administer and tune Microsoft 365 E5 security stack across Defender, Purview, and Entra ID.
• Maintain secure baselines for Exchange Online, SharePoint, Teams, and OneDrive.
• Monitor Defender XDR and Sentinel; perform threat hunting and tuning.
• Design and tune DLP policies; manage data classification and labeling with stakeholders.
• Investigate DLP incidents and report data exfiltration trends.
• Administer PAM platforms; onboard privileged accounts and manage access reviews.
• Administer and tune WAF policies to protect apps and APIs from OWASP Top 10.
• Support firewall/rules, network segmentation, and secure remote access.
• Implement and maintain Zero Trust policies, conditional access, and device compliance.
• Support SASE/proxy platforms for access control and MFA; manage identity governance.
• Log analysis and incident response escalation; vulnerability scanning and remediation tracking.
• Document security architecture and SOPs; automate tasks with scripting.
• Assist with ISO 27001 and other compliance evidence and remediation.

Skills

Security engineering

Microsoft 365 E5 security

DLP

PAM (CyberArk, Delinia)

WAF management (Imperva)

Zero Trust

Scripting (PowerShell, Python, KQL)

SIEM/log analysis

Education

Bachelor's degree in IT/CS/Cybersecurity or related field

Tools

CyberArk

Imperva WAF

Defender suite

Purview

Entra ID

PIM

SASE proxies (Netskope, Zscaler, Cato)

Job description

VaporVM is seeking an Information Security Systems Engineer to own the day-to-day engineering and tuning of core security platforms. The role focuses on Microsoft 365 E5 workloads, DLP, PAM, WAF, and Zero Trust controls, delivering hands-on security analysis and threat detection support.

Responsibilities include configuring Defender, Purview, and Entra ID; maintaining Exchange/SharePoint security baselines; threat monitoring; DLP policy design; PAM management; and incident response coordination