Security Engineer: Microsoft 365 Defender & Compliance Lead

SystemSquad Pte Ltd; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Jora Malaysia is seeking a security engineer to deliver and operate the security stack that our clients rely on — primarily Microsoft Defender, Entra ID, Intune, and Purview — backed by our SIEM and managed detection services. You will also be the engineer who helps clients pass their compliance assessments and remain compliant.

You will own deployment and hardening of Microsoft 365 security tooling, security baseline design for new onboarding, alert triage, SIEM tuning, vulnerability

Qualifications

• 4+ years in IT with at least 2 focused on security engineering or security operations
• Hands-on production experience with Microsoft 365 security tooling — Defender, Entra ID, Intune at minimum
• Understanding of identity, endpoint, and email as the three primary attack surfaces, and how to defend each
• Ability to write a clear assessment report a non-technical business owner can act on

Responsibilities

• Deployment and hardening of Microsoft 365 security: Defender XDR, Defender for Endpoint, Defender for Office 365, Entra ID Conditional Access, Intune, Purview DLP and information protection
• Security baseline design and tenant hardening for new client onboarding
• Alert triage, investigation, and response across our managed detection service
• SIEM rule tuning and detection engineering [Wazuh / Microsoft Sentinel]
• Vulnerability management: scanning, prioritisation, and remediation guidance for clients
• Client compliance readiness — CSA Cyber Essentials and Cyber Trust, PDPA, security questionnaires from clients' customers and insurers
• Security documentation: baselines, assessment reports, remediation plans

Skills

Security engineering

Security operations

Incident response

Technical writing

Tools

Defender

Entra ID

Intune

Purview

Wazuh

Microsoft Sentinel

Job description

Jora Malaysia is seeking a security engineer to deliver and operate the security stack that our clients rely on — primarily Microsoft Defender, Entra ID, Intune, and Purview — backed by our SIEM and managed detection services. You will also be the engineer who helps clients pass their compliance assessments and remain compliant.

You will own deployment and hardening of Microsoft 365 security tooling, security baseline design for new onboarding, alert triage, SIEM tuning, vulnerability