Defender XDR Security Engineer - Microsoft Cloud

B5 Recruiting; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

B5 Recruiting is partnering with a client to hire an experienced Security Engineer to advance the Microsoft security ecosystem across endpoints, cloud, identities, email, and business apps. You will configure Defender XDR, Purview, and Defender for Endpoint, while aligning governance and compliance with FedRAMP-related controls.

This role requires strong collaboration with SOC, governance, and audit teams. The ideal candidate will implement and mature security controls, tune policies, and

Qualifications

• Hands-on experience with Microsoft Defender XDR and the Microsoft security ecosystem.
• Experience implementing or administering Microsoft Defender for Endpoint, including ASR policies.
• Practical knowledge of Purview and Data Loss Prevention controls.
• Experience with Defender for Cloud and Azure security/compliance controls.
• Familiarity with Microsoft Sentinel, SIEM integrations, security monitoring, and incident response.

Responsibilities

• Configure and expand Purview DLP controls across endpoints, M365, email, and cloud apps.
• Review policy coverage and identify gaps that could create compliance or data protection risks.
• Partner with governance and compliance stakeholders to translate requirements into practical DLP controls.
• Support policy tuning, monitoring, and audit preparation.
• Configure Defender for Endpoint and ASR rules, tune endpoint policies, and reduce unnecessary alerts.
• Link endpoint telemetry with Microsoft Sentinel for improved investigations.
• Support the modernization of Azure security monitoring and Defender for Cloud across IaaS and PaaS.
• Maintain cloud security policies aligned with security standards and regulatory frameworks, including FedRAMP-related controls.
• Use Azure governance tools like Azure Policy and Secure Score to improve security posture.
• Design and maintain integrated Microsoft security environments across Defender XDR components and Sentinel.

Skills

Microsoft Defender XDR

Defender for Endpoint

Purview & DLP

Azure security & governance

Microsoft Sentinel

Cloud security controls

Tools

Microsoft Defender for Endpoint

Azure Policy

Secure Score

Microsoft Purview

M365 security stack

Job description

B5 Recruiting is partnering with a client to hire an experienced Security Engineer to advance the Microsoft security ecosystem across endpoints, cloud, identities, email, and business apps. You will configure Defender XDR, Purview, and Defender for Endpoint, while aligning governance and compliance with FedRAMP-related controls.

This role requires strong collaboration with SOC, governance, and audit teams. The ideal candidate will implement and mature security controls, tune policies, and