Endpoint & Microsoft 365 Security Engineer (Ghent)

D-ploy GmbH; Belgique; À distance; EUR 70 000 - 99 000; Plein temps

Avantages offerts par ce poste

Friendly and international environment

Professional development opportunities

Referral program

Company-sponsored events

Résumé du poste

D-ploy GmbH is seeking an experienced Security Engineer specializing in endpoint, Microsoft 365 and email security. This hands-on role focuses on protecting user devices, collaboration platforms and communication technologies by ensuring security controls are correctly configured, monitored and improved.

You will review configurations, identify weaknesses, coordinate remediation, and provide visibility into the organisation's security posture across endpoints, M365 and Mimecast, with

Qualifications

• At least five years of relevant security engineering or operational security experience.
• Experience configuring and governing endpoint and Microsoft 365 security controls.
• Strong knowledge of endpoint hardening, EDR/XDR, and patch/update compliance.
• Familiarity with Mimecast admin and secure email gateway.
• Ability to produce security reports and dashboards.
• Valid criminal record extract (not older than three months).

Responsabilités

• Protect endpoints and ensure secure configuration and compliance.
• Maintain and improve endpoint baselines and telemetry.
• Coordinate remediation for non-compliant devices.
• Manage Microsoft 365 and Entra ID security controls.
• Support Purview information protection, DLP and eDiscovery.
• Oversee email security controls and anti-phishing measures.
• Develop dashboards and KPIs for security posture.
• Document remediation activities with clear ownership.

Connaissances

Endpoint security

EDR/XDR

Microsoft 365 security

Mimecast security

Email security

DMARC/DKIM/SPF

Security monitoring

KQL

Incident management

Security reporting

Outils

Microsoft Defender portal

Microsoft Intune

Entra admin centre

Exchange admin centre

Mimecast

Qualys

ServiceNow

Power BI

Excel

Description du poste

D-ploy is an IT and Engineering Solutions company delivering services to organisations across the EMEA region and the United States. We work closely with our clients to provide reliable, secure and practical technology solutions, supported by collaborative teams and a people-focused working environment.

We are looking for an experienced Security Engineer specialising in endpoint, Microsoft 365 and email security. This is a hands-on role focused on protecting user devices, collaboration platforms and communication technologies by ensuring that security controls are correctly configured, effectively monitored and continuously improved.

The role combines technical engineering with operational security ownership. You will review security configurations, identify weaknesses and risky exceptions, coordinate remediation activities and provide clear visibility into the organisation’s endpoint, Microsoft 365 and email security posture.

This is a remote-first position, with occasional travel to company offices when required. You will collaborate with Workplace Technology, IT Operations, Security Operations, business stakeholders, external vendors and specialist service providers.

Your responsibilities will include:

• Protecting corporate laptops, desktops, supported mobile devices and other managed endpoints throughout their lifecycle, ensuring they remain securely configured, monitored and compliant.
• Maintaining and improving endpoint security baselines, including endpoint protection, EDR/XDR health, vulnerability scanning, device telemetry, patching and update compliance.
• Investigating and coordinating the remediation of devices that are degraded, non-compliant or no longer reporting correctly.
• Managing or supporting organisational controls for permitted and prohibited applications.
• Operating and enhancing Microsoft 365 and Entra ID security controls, particularly Conditional Access, device compliance, privileged access and local administrator protection.
• Supporting Microsoft Purview security and compliance capabilities, including information protection, Data Loss Prevention, audit, eDiscovery and retention-related controls.
• Working with privacy and compliance stakeholders to ensure that relevant Purview controls are appropriately implemented and maintained.
• Managing or providing strong operational support for Microsoft 365 and Mimecast email security controls.
• Reviewing and improving anti‑spoofing, spam, phishing, attachment handling, impersonation and Business Email Compromise protections.
• Maintaining email authentication and reporting controls, including DMARC, DKIM, SPF and user phishing‑reporting processes.
• Identifying and resolving email security assessment findings, configuration gaps and inappropriate exceptions in collaboration with internal teams and external specialists.
• Establishing practical operating procedures, dashboards, control evidence, KPIs and continuous improvement actions for endpoint, Microsoft 365 and email security.
• Using security incidents, phishing trends, audit observations, assessment results and user experience issues to develop sustainable improvements to security controls.
• Documenting remediation activities, assigning clear ownership and ensuring that actions are supported by appropriate evidence.

• At least five years of relevant security engineering or operational security experience within enterprise environments.
• Practical experience configuring, governing, reviewing or assessing endpoint and Microsoft 365 security controls.
• Strong hands‑on knowledge of endpoint security, endpoint hardening, EDR/XDR, endpoint telemetry and patch or update compliance.
• Experience working with Microsoft Defender for Endpoint and Microsoft Intune, including device compliance and the monitoring of endpoint security health.
• Strong knowledge of Microsoft 365 and Microsoft Entra ID security, particularly Conditional Access, Multi‑Factor Authentication, device posture, privileged access, audit logging and secure access governance.
• Good understanding of Microsoft 365 email security and secure email gateway controls.
• Experience with anti‑spoofing, phishing and spam protection, attachment policies, impersonation and Business Email Compromise controls.
• Knowledge of DMARC, DKIM, SPF, phishing‑reporting processes, exception handling and safe links or safe attachments concepts.
• Familiarity with Microsoft Purview capabilities, including information protection, Data Loss Prevention, audit, eDiscovery and retention concepts.
• Experience using administrative and investigation tools such as Microsoft Defender portal, Microsoft Intune, Microsoft Entra admin centre and Exchange admin centre.
• Familiarity with Mimecast administration or comparable secure email gateway technology. Direct Mimecast experience is strongly preferred.
• Experience with Microsoft Sentinel, KQL or similar security monitoring and investigation tools.
• Familiarity with vulnerability scanning or vulnerability management platforms such as Qualys.
• Experience working with ServiceNow or similar platforms for incident management, exception handling and remediation tracking.
• Ability to produce and maintain meaningful security reports and dashboards using tools such as Excel or Power BI.
• Strong ability to review technical configurations, identify weak controls, bypasses or risky exceptions and convert findings into structured remediation plans.
• Experience with operational governance, evidence collection, security exception management, incident or alert handover and remediation follow‑up.
• Strong communication and collaboration skills, with the ability to work effectively with technical teams, vendors and business stakeholders.
• Ability to balance security requirements with operational constraints and user experience considerations.
• Relevant security or Microsoft certifications are desirable but not mandatory.
• Valid criminal record extract, not older than three months, required.

• Broad range of tasks and responsibilities

• Friendly and international working environment

• Professional development opportunities

• Referral program ("Fishing for Friends")

• Company-sponsored events

Is IT in your DNA?