Technology Specialist - Microsoft

SHI Solutions India Pvt. Ltd.; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

SHI Solutions India Pvt. Ltd. is seeking a cybersecurity professional to design, implement, and manage Microsoft Purview components within a multi-cloud and on-premise environment.

The role focuses on Information Protection, DLM, DLP, IRM, eDiscovery, and Information Barriers while coordinating with legal and risk teams. You will also manage Defender for Endpoint (MDE), respond to advanced endpoint alerts, and conduct advanced hunting with KQL to build custom detections.

Qualifications

• Design, implement, and manage Microsoft Purview components across information protection, DLM, DLP, IRM, eDiscovery, and information barriers.
• Configure Defender for Endpoint and integrate with Microsoft 365 Defender suite.
• Perform advanced hunting using Kusto Query Language (KQL) and tune policies to reduce false positives.

Responsibilities

• Design, implement, and manage Microsoft Purview components across on-prem and cloud repositories.
• Collaborate with compliance, legal, and risk teams for regulatory alignment (GDPR, HIPAA, NIST, ISO 27001).
• Manage Defender for Endpoint (MDE), respond to endpoint alerts, and coordinate remediation with Threat Response Team.

Skills

Microsoft Purview

Defender for Endpoint (MDE)

KQL

Job description

Job Description

• Design, implement, and manage Microsoft Purview components:
• Information Protection (MIP): Labels, sensitivity labels, auto-labeling, encryption, and DLP policies.
• Data Lifecycle Management (DLM): Retention, records management, and disposition.
• Data Loss Prevention (DLP): Endpoint, Exchange, SharePoint, OneDrive, Teams DLP configuration and tuning.
• Insider Risk Management (IRM): Policy creation, alert analysis, and case management.
• Communication Compliance: Configure and monitor policies for inappropriate or regulated content.
• eDiscovery & Audit: Manage Core and Advanced eDiscovery cases, legal holds, and audit logs.
• Information Barriers: Configure policies to enforce ethical walls and prevent data leaks.
• Perform data classification, discovery, and governance across on-premises, cloud, and third-party repositories.
• Collaborate with compliance, legal, and risk teams for regulatory alignment (GDPR, HIPAA, NIST, ISO 27001).

• Manage and optimize Defender for Endpoint (MDE) across Windows
• Analyze and respond to advanced endpoint alerts, incidents, and behavioral detections in Microsoft 365 Defender portal.
• Implement attack surface reduction (ASR) rules, EDR, and AV policies via Intune or GPO.
• Integrate MDE with Microsoft Sentinel, Defender for Identity, and Defender for Cloud Apps (MCAS).
• Conduct advanced hunting using Kusto Query Language (KQL) and generate custom detections.
• Coordinate with the Threat Response Team for endpoint containment, isolation, and remediation.
• Tune policies and detections to reduce false positives and improve endpoint security posture.

Microsoft Purview (Information Protection & Compliance)

• Design, implement, and manage Microsoft Purview components:
• Information Protection (MIP): Labels, sensitivity labels, auto-labeling, encryption, and DLP policies.
• Data Lifecycle Management (DLM): Retention, records management, and disposition.
• Data Loss Prevention (DLP): Endpoint, Exchange, SharePoint, OneDrive, Teams DLP configuration and tuning.
• Insider Risk Management (IRM): Policy creation, alert analysis, and case management.
• Communication Compliance: Configure and monitor policies for inappropriate or regulated content.
• eDiscovery & Audit: Manage Core and Advanced eDiscovery cases, legal holds, and audit logs.
• Information Barriers: Configure policies to enforce ethical walls and prevent data leaks.
• Perform data classification, discovery, and governance across on-premises, cloud, and third-party repositories.
• Collaborate with compliance, legal, and risk teams for regulatory alignment (GDPR, HIPAA, NIST, ISO 27001).

• Microsoft Defender for Endpoint (MDE)
• Manage and optimize Defender for Endpoint (MDE) across Windows
• Analyze and respond to advanced endpoint alerts, incidents, and behavioral detections in Microsoft 365 Defender portal.
• Implement attack surface reduction (ASR) rules, EDR, and AV policies via Intune or GPO.
• Integrate MDE with Microsoft Sentinel, Defender for Identity, and Defender for Cloud Apps (MCAS).
• Conduct advanced hunting using Kusto Query Language (KQL) and generate custom detections.
• Coordinate with the Threat Response Team for endpoint containment, isolation, and remediation.
• Tune policies and detections to reduce false positives and improve endpoint security posture.

Requirements

• Job Requirements: Microsoft Purview (Information Protection & Compliance)
• Design, implement, and manage Microsoft Purview components:
• Information Protection (MIP): Labels, sensitivity labels, auto-labeling, encryption, and DLP policies.
• Data Lifecycle Management (DLM): Retention, records management, and disposition.
• Data Loss Prevention (DLP): Endpoint, Exchange, SharePoint, OneDrive, Teams DLP configuration and tuning.
• Insider Risk Management (IRM): Policy creation, alert analysis, and case management.
• Communication Compliance: Configure and monitor policies for inappropriate or regulated content.
• eDiscovery & Audit: Manage Core and Advanced eDiscovery cases, legal holds, and audit logs.
• Information Barriers: Configure policies to enforce ethical walls and prevent data leaks.
• Perform data classification, discovery, and governance across on-premises, cloud, and third-party repositories.
• Collaborate with compliance, legal, and risk teams for regulatory alignment (GDPR, HIPAA, NIST, ISO 27001).

• Microsoft Defender for Endpoint (MDE)
• Manage and optimize Defender for Endpoint (MDE) across Windows
• Analyze and respond to advanced endpoint alerts, incidents, and behavioral detections in Microsoft 365 Defender portal.
• Implement attack surface reduction (ASR) rules, EDR, and AV policies via Intune or GPO.
• Integrate MDE with Microsoft Sentinel, Defender for Identity, and Defender for Cloud Apps (MCAS).
• Conduct advanced hunting using Kusto Query Language (KQL) and generate custom detections.
• Coordinate with the Threat Response Team for endpoint containment, isolation, and remediation.
• Tune policies and detections to reduce false positives and improve endpoint security posture.