Security Engineer – Microsoft Defender XDR & Cloud

B5 Recruiting; Washington (District of Columbia); On-site; USD 140,000 - 180,000; Full time

Job summary

B5 Recruiting is partnering with a client in Washington, DC to hire an experienced Security Engineer to mature the Microsoft security ecosystem across endpoints, cloud, identities, and email. You will configure Defender XDR, Purview, and Cloud security controls while aligning with governance, compliance, and audit teams.

The role emphasizes hands-on Defender for Endpoint, Defender for Cloud, and Sentinel integrations, telemetry-driven security, and operational readiness.

Qualifications

• Hands-on experience with Microsoft Defender XDR and the Microsoft security ecosystem.
• Experience implementing or administering Microsoft Defender for Endpoint, including ASR policies.
• Practical knowledge of Microsoft Purview and Data Loss Prevention controls.
• Experience with Microsoft Defender for Cloud and Azure security/compliance controls.

Responsibilities

• Configure and expand Microsoft Purview Data Loss Prevention controls across endpoints, Microsoft 365 environments, email, and cloud apps.
• Review policy coverage and identify gaps that could create compliance or data protection risks.
• Translate organizational requirements into practical DLP controls with governance and compliance stakeholders.
• Support ongoing policy tuning, monitoring, and audit preparation.
• Configure and implement Defender for Endpoint security controls, including ASR policies.
• Evaluate security controls against prioritized threat scenarios and cybersecurity frameworks.
• Tune endpoint policies to balance security with business operations.
• Integrate endpoint telemetry with Microsoft Sentinel for improved investigations.
• Modernize Azure security and compliance monitoring using telemetry-driven controls.
• Configure Defender for Cloud across IaaS and PaaS environments.
• Maintain cloud security policies aligned with standards and regulatory frameworks (FedRAMP-related controls).
• Use Azure governance tools like Azure Policy, Secure Score, and automated remediation.
• Help design and maintain an integrated Microsoft security environment across Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud Apps, Defender for Servers, and Sentinel.
• Improve visibility and correlation of security events across endpoints, identities, cloud, and collaboration environments.
• Support the use and configuration of Copilot for Security to enhance SOC investigations and responses.
• Assist with testing, troubleshooting, and optimization of integrations across the Microsoft security stack.
• Develop documentation, procedures, and operational playbooks for newly implemented security capabilities.
• Partner with SOC and cybersecurity teams to transition solutions into steady-state operations.
• Provide knowledge transfer and training on new controls, dashboards, and investigation workflows.
• Support audit, compliance, and security teams with evidence collection and control validation.

Skills

Microsoft Defender XDR

Microsoft Purview

Defender for Endpoint

Defender for Cloud

Azure security

Microsoft Sentinel

Governance & Compliance collaboration

Audit readiness

Tools

Azure Policy

Secure Score

Copilot for Security

Microsoft Defender for Cloud Apps

SIEM integrations

Job description

B5 Recruiting is partnering with a client in Washington, DC to hire an experienced Security Engineer to mature the Microsoft security ecosystem across endpoints, cloud, identities, and email. You will configure Defender XDR, Purview, and Cloud security controls while aligning with governance, compliance, and audit teams.

The role emphasizes hands-on Defender for Endpoint, Defender for Cloud, and Sentinel integrations, telemetry-driven security, and operational readiness.