IT Security Engineer Senior Specialist - Digital Collaboration

Boston Consulting Group (BCG); Gurgaon; On-site; INR 1,500,000 - 2,400,000; Full time

Job summary

Boston Consulting Group is seeking a security engineer to safeguard collaboration tools and data across the enterprise. You will partner with SaaS and Sustaining Engineering teams to enforce security policies within the Digital Collaboration portfolio.

Responsibilities include configuring Microsoft 365 security, implementing data lifecycle controls, and advancing automation and governance. Strong scripting and cloud platform knowledge are highly valued.

Qualifications

• Understanding of security controls frameworks and operational excellence procedures and protocols
• Strong knowledge of the security and compliance product market
• Working knowledge of scripting (i.e. Powershell), workflow automation (i.e. Power Automate), and API consumption (i.e. Microsoft Graph) is preferred.
• Prior experience implementing and administering Microsoft Purview and/or Defender
• Solid knowledge of enterprise collaboration platforms, including Microsoft 365 and Google

Responsibilities

• Designing, administering, and configuring collaboration security capabilities across Microsoft 365 and non-Microsoft platforms.
• Implementing data lifecycle management, retention, and records management capabilities
• Applying defense-in-depth principles and compliance‑by‑default thinking to configurations and
• Creating and improving technical solutions for defined use cases and emerging requirements
• Executing vulnerability management and event detection activities across existing BCG solutions, in alignment with Security Operations direction
• Partnering with our Secure Data squad to tune and improve Data Loss Prevention capabilities and policy efficacy
• Identifying opportunities to automate and streamline security analysis, response, and policy
• Serving as an escalation point for high-visibility or high-criticality issues, including regional or global outages involving our IT Services team and external vendor partners when necessary
• Working with Security Architecture to define and execute an enterprise‑scale, automation‑first

Skills

Security engineering

PowerShell

Power Automate

Microsoft Graph

GenAI security

English proficiency

Vulnerability management

Data loss prevention

Tools

Microsoft Purview

Defender

Microsoft 365

Google Workspace

Job description

Job Description:

Who We Are

Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation‑inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom‑line impact.

To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading‑edge management consulting along with technology and design, corporate and digital ventures—and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.

What You'll Do

BCG is looking for innovative and effective ways to safeguard collaboration experiences and protect BCG and client data. Our security engineering team is tasked with partnering with our SaaS and Sustaining Engineering teams, as well as our Solution Architecture team, to ensure that we are executing the security policies of our organization effectively. This role spans across the entirety of the Digital Collaboration product portfolio as part of our central control plane management.

operational activities

• Designing, administering, and configuring collaboration security capabilities across Microsoft 365 and non-Microsoft platforms.
• Implementing data lifecycle management, retention, and records management capabilities
• Applying defense-in-depth principles and compliance‑by‑default thinking to configurations and

configuration

• Creating and improving technical solutions for defined use cases and emerging requirements
• Executing vulnerability management and event detection activities across existing BCG solutions, in alignment with Security Operations direction
• Partnering with our Secure Data squad to tune and improve Data Loss Prevention capabilities and policy efficacy
• Identifying opportunities to automate and streamline security analysis, response, and policy

approach to data labeling and classification

• Serving as an escalation point for high-visibility or high-criticality issues, including regional or global outages involving our IT Services team and external vendor partners when necessary
• Working with Security Architecture to define and execute an enterprise‑scale, automation‑first

What You’ll Bring

• Understanding of security controls frameworks and operational excellence procedures and protocols

protocols

• Strong knowledge of the security and compliance product market
• Working knowledge of scripting (i.e. Powershell), workflow automation (i.e. Power Automate), and API consumption (i.e. Microsoft Graph) is preferred.
• Prior experience implementing and administering Microsoft Purview and/or Defender
• Solid knowledge of enterprise collaboration platforms, including Microsoft 365 and Google

Workspace, messaging, whiteboarding, and virtual conferencing tools

• Experience working in complex enterprise organizations with multi-vendor ecosystems, including the ability to help disparate platforms operate together effectively and identity pain points or capability gaps
• Proven experience solving complex problems with simple, effective solutions
• Understanding of security concepts and how data flows through collaboration tools, including how to protect data at rest and in transit across corporate and public networks
• Prior knowledge of GenAI tool security and governance strongly preferred
• Level C2 English proficiency as demonstrated by IELTS 7+, TOEFL iBT 94+, TOEIC 901+,

CAMBRIDGE CPE, or comparable demonstrated proficiency.

Who You'll Work With

This individual will collaborate with other BCG information technology teams such as ISRM, Identity, Secure Infrastructure Platforms, and Personal Productivity to ensure alignment with BCG’s overall IT architecture plan.

Additional info

Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws.

BCG is an E - Verify Employer. Click here for more information on E-Verify.

YOU’RE GOOD AT

• Thinking creatively and entrepreneurially to develop concepts and solutions for the firm’s most challenging collaboration needs

Applying a security and compliance mindset, with the ability to anticipate risks and identify problems or patterns early

• Using strong problem-solving skills to identity and resolve issues quickly
• Working independently as well as part of a virtual, geographically dispersed team while maintaining ownership and a bias towards action
• Handling difficult or stressful situations with poise, tact, patience, and empathy
• Applying strong analytical skills, attention to detail, and a high standard for quality
• Bringing change management and engineering discipline to protect the integrity of production environments
• Working in an agile delivery environment to define, manage, and track work in Jira
• Communicating clearly in verbal, written, and presentation settings, including explaining technical concepts to non-technical audiences.
• Collaborating across functions and influencing outcomes without relying on direct authority.

Requirements: