Microsoft 365 Security Engineer - Email & Identity

Welltower™ Inc. (NYSE:WELL); Plano (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive Base Salary + Annual Bonus

Employee Stock Purchase Program

Employer‑matching 401(k) + Profit-Shar

Tuition Assistance

Comprehensive Medical/Dental/Vision

Paid Time Off

Job summary

Welltower is seeking a Microsoft 365 Security Engineer to design and operationalize security across email, identity, endpoint detection, and data protection. This role partners with Digital Workspace, Security Operations, Messaging/Infrastructure, and Endpoint teams to implement secure collaboration and governance.

Responsibilities focus on Defender for Office 365, Defender for Endpoint, Purview, and identity security controls to strengthen incident response, detection, and policy-driven

Qualifications

• 5–7+ years of experience in Microsoft 365 security engineering within a complex enterprise environment.
• Deep expertise in Microsoft Defender, Exchange Online security and mail flow, Microsoft Purview, and core identity security controls.
• Experience implementing enterprise security baselines, secure configuration standards, and policy‑driven controls at scale.
• Strong understanding of incident response workflows, control validation, and operational governance across Microsoft 365 platforms.
• Ability to translate security and compliance requirements into practical engineering solutions in partnership with security, infrastructure, and workplace technology teams.

Responsibilities

• Engineer and optimize core Microsoft 365 email security capabilities, including Defender for Office 365 and anti‑phishing controls.
• Design secure mail flow, enforce best practices, and implement policy‑driven protections across inbound, outbound, and internal messaging.
• Develop and maintain secure configuration standards for email protection, spoofing prevention, and user‑facing collaboration controls.
• Lead technical response and continuous improvement efforts for phishing, business email compromise, and related messaging threats.
• Engineer, tune, and support Defender capabilities with a focus on scalable enterprise deployment.
• Partner with endpoint engineering to align device posture, compliance signals, and Defender telemetry with Conditional Access and Zero Trust objectives.
• Improve detection fidelity, reduce false positives, and strengthen operational readiness through repeatable engineering standards.
• Collaborate with Security Operations on incident response, threat hunting, and continuous improvement of endpoint and cloud threat protections.
• Design, implement, and manage Microsoft Purview capabilities, including Data Loss Prevention, sensitivity labeling, classification, Insider Risk, and eDiscovery.
• Translate business and compliance requirements into scalable technical controls that support governance, data handling standards, and secure collaboration.
• Develop and maintain policy-aligned protection standards for sensitive information across Microsoft 365 workloads.
• Partner with stakeholders to validate control effectiveness, support investigations, and continuously improve information protection maturity.
• Support and help operationalize identity security controls, including Conditional Access, MFA/passwordless strategies, Privileged Identity Management, and secure access governance.

Skills

Microsoft 365 security engineering

Defender for Office 365

Exchange Online security

Microsoft Purview

Identity security controls

Job description

Welltower is seeking a Microsoft 365 Security Engineer to design and operationalize security across email, identity, endpoint detection, and data protection. This role partners with Digital Workspace, Security Operations, Messaging/Infrastructure, and Endpoint teams to implement secure collaboration and governance.

Responsibilities focus on Defender for Office 365, Defender for Endpoint, Purview, and identity security controls to strengthen incident response, detection, and policy-driven