Technology Specialist- Microsoft

SHI; Hyderabad; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

SHI in Hyderabad, India seeks a skilled Security Architect to design, implement, and manage Microsoft Purview components, including Information Protection, DLM, DLP, and eDiscovery, plus Defender for Endpoint integration across Windows environments.

You will collaborate with compliance, legal, and risk teams to ensure regulatory alignment (GDPR, HIPAA, NIST, ISO 27001) and optimize ASR rules, EDR, and SIEM integrations using MDE, Defender, Sentinel, and KQL.

Qualifications

• Experience designing and implementing Purview components (MIP, DLM, DLP) across hybrid environments.
• Hands-on experience with Defender for Endpoint, Microsoft 365 Defender, and Sentinel integrations.
• Familiarity with regulatory compliance frameworks (GDPR, HIPAA, NIST, ISO 27001).

Responsibilities

• Design, implement, and manage Microsoft Purview components.
• Configure DLP, IRM, and eDiscovery workflows; ensure data governance.
• Manage Defender for Endpoint across Windows and integrate with SIEM.
• Coordinate with legal/compliance teams for regulatory alignment.

Skills

Security architecture

Regulatory alignment

Threat detection

Data governance

Education

Bachelor's degree in CS/IT or equivalent

Tools

Microsoft Purview

Defender for Endpoint

Microsoft Sentinel

Kusto Query Language (KQL)

Intune

Group Policy / GPO

Job description

Job Description

Microsoft Purview (Information Protection & Compliance)

• Design, implement, and manage Microsoft Purview components:
• Information Protection (MIP): Labels, sensitivity labels, auto-labeling, encryption, and DLP policies.
• Data Lifecycle Management (DLM): Retention, records management, and disposition.
• Data Loss Prevention (DLP): Endpoint, Exchange, SharePoint, OneDrive, Teams DLP configuration and tuning.
• Insider Risk Management (IRM): Policy creation, alert analysis, and case management.
• Communication Compliance: Configure and monitor policies for inappropriate or regulated content.
• eDiscovery & Audit: Manage Core and Advanced eDiscovery cases, legal holds, and audit logs.
• Information Barriers: Configure policies to enforce ethical walls and prevent data leaks.
• Perform data classification, discovery, and governance across on-premises, cloud, and third-party repositories.
• Collaborate with compliance, legal, and risk teams for regulatory alignment (GDPR, HIPAA, NIST, ISO 27001).

Microsoft Defender for Endpoint (MDE)

• Manage and optimize Defender for Endpoint (MDE) across Windows
• Analyze and respond to advanced endpoint alerts, incidents, and behavioral detections in Microsoft 365 Defender portal.
• Implement attack surface reduction (ASR) rules, EDR, and AV policies via Intune or GPO.
• Integrate MDE with Microsoft Sentinel, Defender for Identity, and Defender for Cloud Apps (MCAS).
• Conduct advanced hunting using Kusto Query Language (KQL) and generate custom detections.
• Coordinate with the Threat Response Team for endpoint containment, isolation, and remediation.
• Tune policies and detections to reduce false positives and improve endpoint security posture.Role & responsibilities

Job Requirements

Microsoft Purview (Information Protection & Compliance)

• Design, implement, and manage Microsoft Purview components:
• Information Protection (MIP): Labels, sensitivity labels, auto-labeling, encryption, and DLP policies.
• Data Lifecycle Management (DLM): Retention, records management, and disposition.
• Data Loss Prevention (DLP): Endpoint, Exchange, SharePoint, OneDrive, Teams DLP configuration and tuning.
• Insider Risk Management (IRM): Policy creation, alert analysis, and case management.
• Communication Compliance: Configure and monitor policies for inappropriate or regulated content.
• eDiscovery & Audit: Manage Core and Advanced eDiscovery cases, legal holds, and audit logs.
• Information Barriers: Configure policies to enforce ethical walls and prevent data leaks.
• Perform data classification, discovery, and governance across on-premises, cloud, and third-party repositories.
• Collaborate with compliance, legal, and risk teams for regulatory alignment (GDPR, HIPAA, NIST, ISO 27001).

Microsoft Defender for Endpoint (MDE)

• Manage and optimize Defender for Endpoint (MDE) across Windows
• Analyze and respond to advanced endpoint alerts, incidents, and behavioral detections in Microsoft 365 Defender portal.
• Implement attack surface reduction (ASR) rules, EDR, and AV policies via Intune or GPO.
• Integrate MDE with Microsoft Sentinel, Defender for Identity, and Defender for Cloud Apps (MCAS).
• Conduct advanced hunting using Kusto Query Language (KQL) and generate custom detections.
• Coordinate with the Threat Response Team for endpoint containment, isolation, and remediation.
• Tune policies and detections to reduce false positives and improve endpoint security posture.

Preferred candidate profile