IT Security Operations & Engineering Specialist

Microsoft Defender Security Engineering and MS Purview

• Design, implement, and manage the Microsoft Defender Security suite

• Configure and optimize attack surface reduction rules.

• Implement endpoint detection and response (EDR) capabilities.

• Create advanced KQL queries for threat hunting and investigations.

• Automate security workflows using Defender API

• Drive security posture improvement through Secure Score recommendations.

Network Security & Micro segmentation

• Design and implement enterprise network micro segmentation strategies.

• Support Zero Trust architecture and least-privilege access models.

• Develop segmentation policies for:

ü Data centers ü Cloud environments ü Critical business applications ü User endpoints

• Define security zones and control east-west traffic.

• Conduct traffic flow analysis and dependency mapping.

• Reduce lateral movement risks through segmentation controls.

• Collaborate with network and infrastructure teams to enforce segmentation policies.

Security Engineering & Infrastructure Security

• Harden Windows and Linux servers.

• Implement security baselines and configuration standards.

• Conduct vulnerability assessments and remediation tracking.

• Manage firewall, IDS/IPS, proxy, and NAC security integrations.

• Perform security reviews for new projects and infrastructure deployments.

Must Have Technical/Functional Skills A cybersecurity professional with strong expertise in Microsoft Defender technologies, Microsoft Sentinel, Security Operations, Threat Hunting, Incident Response, Zero Trust Architecture, and Network Micro segmentation, capable of driving both operational security excellence and strategic security engineering initiatives across enterprise environments. MS defender, MS purview Network Security

• Network Segmentation & Microsegmentation

• Firewalls (Palo Alto, Check Point, Fortinet, Cisco)

• IPS/IDS Technologies

• NAC Solutions

• TCP/IP, Routing & Switching

• VPN Technologies

• Zero Trust Architecture, * Strong analytical and troubleshooting skills.

• Excellent stakeholder management.

• Ability to handle critical security incidents under pressure.

• Risk-based decision-making.

• Strong communication and documentation skills.

• Continuous learning mindset regarding emerging cyber threats and technologies., Qualifications : BACHELOR OF COMPUTER SCIENCE

(part of Tata group) 3.93.9 out of 5 stars New York, NY $100,000 - $120,000 a year, Pulled from the full job description

• Pet insurance
• Health insurance
• Vision insurance
• Dental insurance
• Commuter assistance, Discretionary Annual Incentive. Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans. Family Support: Maternal & Parental Leaves. Insurance Options: Auto & Home Insurance, Identity Theft Protection. Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement. Time Off: Vacation, Time Off, Sick Leave & Holidays. Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing. Salary Range: $100,000-$120,000 a year