Security Engineer - Microsoft 365 Security Administration New Hyderabad, India

Truveta Inc.; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Truveta Inc. is seeking a Security Engineer for Microsoft 365 Security Administration. This role focuses on leading the security and governance of Microsoft 365 platforms, including Exchange Online and Microsoft Teams. You will work on protecting sensitive data and ensuring compliance with security best practices.

The ideal candidate will have 4-6+ years of experience in administering Microsoft 365 security and must possess strong communication skills. Truveta values diverse backgrounds and encourages all to apply.

Qualifications

• 4-6+ years of experience administering and securing Microsoft 365 environments.
• Hands-on experience with security features and compliance capabilities.
• Strong understanding of email security and data protection best practices.

Responsibilities

• Lead the security for Microsoft 365 platforms.
• Monitor environments for suspicious activity.
• Investigate and respond to security incidents.

Skills

Microsoft 365 administration

Security operations

PowerShell scripting

Identity and access management

Communication skills

Education

Bachelor's degree in Information Technology or related field

Tools

Microsoft Defender for Office 365

Exchange Online

Microsoft Teams

Microsoft Purview

Job description

Security Engineer - Microsoft 365 Security Administration

Role Overview

We are looking for a Security Engineer for Microsoft 365 Security Administration to lead the security, governance, and protection of Microsoft 365 security and collaboration platforms, including Exchange Online, Microsoft Teams, OneDrive for Business, and Microsoft 365 Copilot. This role focuses on securing identities, protecting sensitive data, strengthening threat detection and response capabilities, and ensuring compliance with security best practices. You will work closely with IT and other security teams to improve security posture and drive the adoption of Microsoft security solutions.

Microsoft 365 Security Administration

• Administer, configure, and maintain Microsoft 365 security and collaboration platforms, including Exchange Online, Microsoft Teams, OneDrive for Business, and Microsoft 365 Copilot
• Manage and enforce security policies across Microsoft 365 services, including email protection, collaboration controls, data sharing, retention, and compliance settings
• Configure and maintain Microsoft Defender for Office 365, Exchange Online Protection (EOP), Safe Links, Safe Attachments, anti-phishing, and anti-spam policies
• Monitor Microsoft 365 environments for suspicious activity, unauthorized access, risky behavior, and security posture gaps
• Administer secure collaboration and external sharing controls for Microsoft Teams and OneDrive for Business
• Support secure deployment, governance, and operational oversight of Microsoft 365 Copilot, including data access controls, compliance considerations, and AI security best practices
• Review and remediate Microsoft Secure Score recommendations and continuously improve Microsoft 365 security posture
• Maintain tenant configuration standards, governance documentation, operational procedures, and security baselines
• Ensure Microsoft 365 services comply with organizational security, privacy, retention, and regulatory requirements

Incident Response & Security Operations

• Investigate and respond to Microsoft 365-related security incidents, including phishing, account compromise, malicious email activity, unauthorized sharing, and insider threats
• Act as an escalation point for complex Microsoft 365 security and administration issues
• Participate in incident response activities related to Exchange Online, Teams, OneDrive, Entra ID, and Microsoft Defender
• Support audit, compliance, eDiscovery, and forensic investigations within Microsoft 365 environments
• Maintain detailed documentation of incidents, remediation activities, and operational changes
• Contribute to security awareness initiatives and help educate users on secure collaboration and Microsoft 365 best practices

Security Monitoring & Automation

• Monitor Microsoft 365 security alerts, audit logs, and Defender incidents to identify and respond to threats in a timely manner
• Develop and maintain reporting, dashboards, and alerting for Microsoft 365 security and operational visibility
• Automate routine administrative and security tasks using PowerShell, Microsoft Graph API, and native Microsoft 365 automation capabilities
• Support integration of Microsoft 365 logs and alerts into SIEM/SOAR platforms such as Microsoft Sentinel
• Assist with development and tuning of alerting, policies, and workflows to reduce operational overhead and improve detection accuracy

Governance, Compliance & Collaboration

• Partner with infrastructure, identity, compliance, and security teams to implement and maintain secure Microsoft 365 solutions
• Support Data Loss Prevention (DLP), retention policies, sensitivity labels, and information protection initiatives across Microsoft 365 workloads
• Assist with license management, service optimization, and adoption of Microsoft 365 security and compliance capabilities
• Participate in Microsoft 365 governance reviews, audits, risk assessments, and remediation activities
• Contribute to operational process improvements, documentation, and platform standardization efforts
• Stay current on Microsoft 365 platform updates, security capabilities, emerging threats, and Microsoft security roadmap changes
• Maintain awareness of evolving AI governance and security considerations related to Microsoft 365 Copilot and generative AI technologies

Key Qualifications

• The knowledge, skills, and abilities typically acquired through the completion of a Bachelor’s degree in Information Technology, Cyber Security, Computer Science, Information Systems, or a related field, or equivalent practical experience.
• 4-6+ years of experience administering and securing Microsoft 365 environments in enterprise organizations.
• Hands-on experience with Exchange Online, Microsoft Teams, OneDrive for Business, Microsoft Entra ID, and Microsoft 365 administration.
• Experience implementing and managing Microsoft Defender for Office 365, Exchange Online Protection (EOP), and Microsoft 365 security and compliance features.
• Strong understanding of Microsoft 365 identity and access management, including Conditional Access, MFA, RBAC, and Zero Trust principles.
• Experience supporting Microsoft 365 security operations, including phishing investigations, account compromise response, and audit log analysis.
• Proficiency with PowerShell scripting and automation for Microsoft 365 administration and reporting.
• Experience with Microsoft Purview compliance capabilities, including DLP, retention policies, sensitivity labels, and eDiscovery.
• Familiarity with Microsoft 365 Copilot administration, governance, security considerations, and AI-related compliance best practices.
• Experience integrating Microsoft 365 security telemetry with SIEM/SOAR platforms such as Microsoft Sentinel is preferred.
• Strong understanding of email security, collaboration security, data protection, and cloud security best practices.
• Ability to troubleshoot complex Microsoft 365 platform, security, and identity issues across multiple services.
• Strong written and verbal communication skills, with the ability to communicate effectively with both technical and non-technical stakeholders.
• Experience developing operational documentation, standards, and administrative procedures.
• Relevant certifications such as Microsoft 365 Certified: Administrator Expert, Microsoft Security Administrator Associate (MS-500), Messaging Administrator Associate, SC-300, SC-400, AZ-104, or similar certifications are preferred.

Truveta is committed to creating a diverse, inclusive, and empowering workplace. We believe that having employees, interns, and contractors with diverse backgrounds enables Truveta to better meet our mission and serve patients and health communities around the world. We recognize that opportunities in technology historically excluded and continue to disproportionately exclude Black and Indigenous people, people of color, people from working class backgrounds, people with disabilities, and LGBTQIA+ people. We strongly encourage individuals with these identities to apply even if you don’t meet all of the requirements.