Hybrid Microsoft Security Engineer: Entra Defender Sentinel

Redherd.Io; Johannesburg; Hybrid; ZAR 720,000 - 950,000; Full time

Benefits offered by this job

Training and certification supported

Hybrid work arrangement

Office in Johannesburg

Job summary

RedHerd is seeking a Security Engineer to own the Microsoft security stack across Entra ID, Defender, Sentinel, Intune and Purview. You will design CA policies, automate detections, and drive endpoint security for Windows and macOS in a hybrid Johannesburg environment.

The role emphasizes hands-on engineering over governance, with a requirement for 2–5 years of Microsoft security experience, PowerShell proficiency, and the ability to operate live incidents end-to-end.

Qualifications

• 2–5 years hands-on security in a Microsoft environment.
• You own the tooling: configured, engineered, investigated, contained or automated.
• Practical Entra ID depth with CA design, not just administration.
• Sentinel and Defender experience, including crafting KQL queries.
• Experience running a live security incident end-to-end.
• PowerShell proficiency and scripting.
• Based in Johannesburg with in-office three days a week; not remote.
• Credible depth in three of four areas: identity; detection and response; endpoint; cloud/data protection.

Responsibilities

• Identity: design Entra ID CA, PIM, and identity protection; manage hybrid identity estate via Entra Connect.
• Detection and response: investigate incidents across Defender for Endpoint, Identity, Office 365; write analytics rules; automate responses; hunt with KQL.
• Endpoint: build/maintain Intune policies; manage macOS and Windows; enforce security baselines and BitLocker.
• Cloud, data and automation: harden Azure with RBAC and Key Vault; configure Purview DLP and retention; automate tasks with PowerShell/Graph API.

Skills

Entra ID

Defender

Sentinel

Intune

Purview

PowerShell

KQL

Education

Matric certificate

Tools

Entra Connect

Microsoft Graph API

Azure

Office 365

Job description

RedHerd is seeking a Security Engineer to own the Microsoft security stack across Entra ID, Defender, Sentinel, Intune and Purview. You will design CA policies, automate detections, and drive endpoint security for Windows and macOS in a hybrid Johannesburg environment.

The role emphasizes hands-on engineering over governance, with a requirement for 2–5 years of Microsoft security experience, PowerShell proficiency, and the ability to operate live incidents end-to-end.