Microsoft Security Specialist

GenZ Talent; Lahore; On-site; PKR 2,400,000 - 4,200,000; Full time

Job summary

GenZ Talent is seeking an experienced Microsoft Security Engineer to manage and strengthen security across Microsoft 365, endpoints, cloud, identity and data environments in Lahore. You will work hands-on with Defender, Sentinel/SentinelOne, Entra ID, Purview and Azure Security, with a focus on Zero Trust, data protection and ISO 27001 governance.

The candidate should have MSP experience and strong skills in threat hunting, incident response, and security monitoring.

Qualifications

• Hands-on experience with Defender, Sentinel, Entra ID, Purview, Microsoft 365 and Azure Security.
• Familiarity with IAM concepts: MFA, conditional access and RBAC.
• Experience in threat hunting, monitoring, incident response and vulnerability management.

Responsibilities

• Manage the Microsoft Defender XDR ecosystem and Defender for Endpoint/Office/Identity/Cloud.
• Operate Microsoft Sentinel and SentinelOne for SIEM/SOAR, threat hunting and incident response.
• Oversee Microsoft Entra ID security, including Conditional Access, MFA and privileged access.
• Manage Purview capabilities: DLP, sensitivity labels, data governance.
• Implement and maintain Azure security controls: Defender for Cloud, policies, Key Vault, NSGs.
• Lead security incident response, root-cause analysis and post-incident improvements.
• Support ISO/IEC 27001 initiatives with audits, risk assessments and remediation.

Skills

Microsoft Defender

Microsoft Sentinel

SentinelOne

Entra ID

Purview

Microsoft 365

Azure Security

Job description

Microsoft Security Engineer

Location: MM Alam Road, Lahore

Salary: Competitive, based on experience

Experience: Relevant experience in an MSP environment is preferred

About the Role

We are looking for an experienced Microsoft Security Engineer to manage, monitor, and strengthen security across Microsoft 365, endpoints, cloud, identity, and data environments.

The ideal candidate will have strong hands‑on experience with Microsoft Defender, Microsoft Sentinel/SentinelOne, Microsoft Entra ID, Microsoft Purview, Azure Security, security licensing, and ISO/IEC 27001. Experience working in an MSP environment will be highly preferred.

Key Responsibilities

• Manage and secure the Microsoft Defender XDR ecosystem, including Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps, and Defender for Cloud.
• Manage Microsoft Sentinel and SentinelOne, including SIEM/SOAR, KQL, threat hunting, security monitoring, automation, and incident response.
• Manage Microsoft Entra ID security, including Conditional Access, MFA, PIM, Identity Protection, RBAC, Access Reviews, and privileged access.
• Manage Microsoft Purview capabilities, including DLP, Information Protection, Sensitivity Labels, eDiscovery, Insider Risk Management, retention, and data governance.
• Implement and maintain Azure security controls, including Defender for Cloud, Azure Policy, Key Vault, NSGs, Private Endpoints, and RBAC.
• Conduct vulnerability management, security assessments, attack-surface reduction, security hardening, and remediation activities.
• Implement and maintain Zero Trust, least-privilege access, identity governance, encryption, and data security controls.
• Monitor Microsoft Secure Score and develop plans to continuously improve the organization’s security posture.
• Review and manage Microsoft security licenses, subscriptions, security features, and license utilization.
• Lead security incident response, root-cause analysis, remediation, and post-incident improvement activities.
• Develop and maintain security policies, standards, technical baselines, incident response procedures, and technical documentation.
• Support ISO/IEC 27001 initiatives, including risk assessments, ISMS requirements, internal and external audits, evidence collection, compliance activities, and remediation.
• Provide security recommendations, technical guidance, and support to IT teams and management.
• Collaborate with internal teams and clients to identify security risks and implement appropriate security solutions.

Required Skills & Experience

• Strong hands-on experience with Microsoft Defender, Microsoft Sentinel, SentinelOne, Microsoft Entra ID, Microsoft Purview, Microsoft 365, and Azure Security.
• Strong understanding of IAM, MFA, PIM, Conditional Access, RBAC, DLP, and data protection.
• Experience in threat hunting, security monitoring, incident response, vulnerability management, and security hardening.
• Working knowledge of ISO/IEC 27001, ISMS, Zero Trust, MITRE ATT&CK, risk management, audits, and compliance.
• Experience with KQL, security automation, SIEM/SOAR, and security operations.
• Strong troubleshooting, analytical, documentation, and communication skills.
• Ability to work effectively in a fast-paced environment and manage multiple security priorities.
• Previous experience working in an MSP environment is highly preferred.

Preferred Certifications

• SC-100 - Microsoft Cybersecurity Architect
• SC-200 - Security Operations Analyst
• AZ-500 - Azure Security Engineer Associate
• ISO/IEC 27001 Lead Implementer / Lead Auditor