Purview & DLP Engineer: SIEM/SOAR Threat Hunter

VaporVM; Dubai; On-site; AED 260,000 - 420,000; Full time

Job summary

VaporVM is seeking an experienced Microsoft Purview and DLP Engineer L3 to provide advanced administration, engineering, monitoring, and investigation support across enterprise data protection platforms.

The ideal candidate will have strong hands-on expertise in Microsoft Purview, DLP, IRM, and security operations, with experience integrating data protection solutions with SIEM, SOAR, and data governance platforms.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Electronics Engineering, or related field.
• 5–6 years of cybersecurity experience with hands-on Purview, DLP, and IRM.
• Strong knowledge of Microsoft 365 security, data classification, sensitivity labels, encryption, and DLP.
• Proficiency in KQL and PowerShell for querying, automation, and investigations.
• Experience integrating Purview, DLP, and IRM with IBM QRadar SIEM and SOAR platforms.
• Familiarity with RBAC, change management, and secure evidence handling.

Responsibilities

• Administer, configure, maintain Purview including DLP and IRM.
• Implement data protection controls across Microsoft 365 and endpoints.
• Identify coverage gaps and test policies to reduce false positives.
• Develop KQL detections for threat hunting and reporting.
• Integrate Purview, DLP, IRM with SIEM and SOAR platforms.
• Develop automated investigation and response workflows using Security Copilot.
• Monitor alerts, conduct L3 investigations, and coordinate remediation.
• Collaborate with cross-functional teams; maintain runbooks and evidence.
• Prepare weekly progress updates and monthly security reports.

Skills

KQL queries

Threat hunting

Investigation

Collaboration

Education

Bachelor's degree in CS/IT/Engineering

Tools

IBM QRadar SIEM

SOAR platforms

Microsoft Purview

PowerShell

Job description

VaporVM is seeking an experienced Microsoft Purview and DLP Engineer L3 to provide advanced administration, engineering, monitoring, and investigation support across enterprise data protection platforms.

The ideal candidate will have strong hands-on expertise in Microsoft Purview, DLP, IRM, and security operations, with experience integrating data protection solutions with SIEM, SOAR, and data governance platforms.