> Markdown version of [/jobs/ext/4513928-senior-information-security-engineer](https://www.wearedevelopers.com/jobs/ext/4513928-senior-information-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Information Security Engineer - **Company:** Globus Medical - **Location:** East Norriton Township, PA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Amazon Web Services, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Computing Security, Cyber Security, Data Security, Multi-Factor Authentication, Identity and Access Management, Intrusion Detection and Prevention, Information Systems Security Architecture Professional, Python (Programming Language), Microsoft Security Essentials, Microsoft Software, Windows PowerShell, Azure Active Directory, Cloud Services, Anti-Phishing, Kusto Query Language, Zero Trust Network Access, Microsoft SharePoint, Security Information and Event Management, Systems Integration, Software Vulnerability Management, EndPointSecurity, Scripting, Google Cloud, Cloud Platform System, Cyber Threat Analysis, Microsoft InTune, Cybercrime, CIS Benchmarks, Meditech, Devsecops, Security Orchestration, Automation & Response - **Published:** November 2, 2026 - **Apply:** https://www.careerbuilder.com/job-details/senior-information-security-engineer-norristown-pa--9c6289c4-d952-4c7f-8775-4dfd8badb79d ## About the Role Information/Data Security (InfoSec), Healthcare Providers, Quality of Life, Surgical Procedures, Telemetry, Ecosystems, Microsoft Product Family, Incident Response, Cloud Computing, Information/Data Security (InfoSec), * Education: Bachelor's Information Security, or related field. * Microsoft Certified: Azure Security Engineer Associate, Microsoft security operations, identity, or information-protection experience demonstrated through equivalent certifications or hands-on work. * Technical Skills: * Advanced proficiency with SIEM, EDR, SOAR, and vulnerability management tools. * Strong scripting skills (Python, PowerShell, Bash). * Deep understanding of cloud security (AWS, Azure, GCP). * Familiarity with DevSecOps and CI/CD security integration. * Experience with zero trust architecture and identity management. * Competencies * Strong identity and access security knowledge, including Zero Trust, MFA and phishing-resistant authentication, privileged access, identity protection, Active Directory, and hybrid identity environments. * Experience with security monitoring, threat detection, incident response, and threat hunting, including SIEM/XDR technologies and platforms such as Microsoft Defender, CrowdStrike Falcon, and Rapid7. * Experience protecting Microsoft 365 data and cloud services, including Exchange Online, SharePoint, OneDrive, Teams, DLP, information protection, auditing, and investigation of suspicious cloud activity. * Proficiency with KQL and PowerShell for security investigations, detection engineering, automation, and operational security tasks; Python or other scripting experience is beneficial. * Experience with endpoint and device security, including Microsoft Intune, device compliance, security baselines, and access controls for managed and unmanaged devices. * Working knowledge of cloud and hybrid security architectures, with strong Microsoft Azure/Microsoft 365 expertise and familiarity with AWS or other cloud environments. * Understanding of vulnerability management, security automation, incident-response processes, and integration between security platforms. Physical Demands: The physical demands listed here are representative of those that must be met by and employee to successfully perform the essential functions of this job. * Required to sit; climb or balance; and stoop, kneel, crouch or crawl * Required to regularly lift and/or move up to 10 pounds, and occasionally lift and/or move up to 25 pounds * Required to possess specific visons abilities, including: close vision, distance vision, color vision, peripheral vision, depth perception and capacity to adjust focus ## Description We are seeking a Senior Information Security Engineer specializing in Microsoft security, identity protection, cloud threat detection, data protection, and incident response. This position will design, implement, and operationalize security controls across Microsoft 365, Microsoft Entra, Azure, Intune, Defender, and Purview while integrating Microsoft security telemetry with the organization's broader security ecosystem, including CrowdStrike and Rapid7. The engineer will lead complex identity and cloud-security investigations, develop and tune detection and response capabilities, strengthen privileged-access and managed-device controls, and help prevent unauthorized access and data exfiltration from Exchange Online, SharePoint, OneDrive, Teams, and other enterprise services. The role will also establish repeatable playbooks, support post-incident remediation, mentor junior analysts, and translate technical findings into actionable operational and executive reporting. Essential Functions: * Design, implement, and maintain Microsoft security controls across Entra ID, Microsoft 365, Defender, Intune, and Purview, including Conditional Access, privileged access, phishing-resistant authentication, device compliance, information protection, DLP, and secure access from managed and unmanaged devices. * Lead identity and Microsoft 365 security monitoring, investigation, and incident response, including identity compromise, suspicious authentication activity, phishing, token/session abuse, business email compromise, unauthorized cloud access, and potential data exfiltration across Exchange Online, SharePoint, OneDrive, Teams, and connected services. * Develop and tune security detections, threat-hunting capabilities, and response workflows using Microsoft Defender XDR, KQL, Microsoft security telemetry, and integrations with platforms such as CrowdStrike and Rapid7. * Strengthen enterprise identity security across Microsoft Entra ID, Active Directory, privileged accounts, service/workload identities, authentication methods, access reviews, and Privileged Identity Management. * Implement and operationalize Microsoft Purview data-security capabilities, including Information Protection, sensitivity labels, DLP, Audit, eDiscovery, and Insider Risk to support data protection and security investigations. * Develop and maintain incident-response playbooks and containment procedures, conduct post-incident reviews, preserve investigative evidence, and track remediation activities through accountable owners and target dates. * Partner with IT, Legal, Privacy, Compliance, HR, business stakeholders, and security service providers during security investigations and remediation activities, with clearly defined internal and vendor responsibilities. * Apply security changes through structured testing and controlled deployment, including report-only evaluation, pilot groups, exception management, validation, and rollback planning to balance security improvement with business continuity. * Adheres to the letter and spirit of the company Code of Conduct, the AdvaMed Code, MedTech Code, and all other company policies. * Ensures Compliance with applicable governmental laws, rules, and regulations, both in the United States and internationally, by completing introductory and annual training and maintaining knowledge of compliance as it applies to your role * Represents the company in a professional manner and uphold the highest standards of ethical business practices and socially responsible conduct in all interactions with other employees, customers, suppliers, and other third parties Reasonable accommodations may be made to enable individuals with disabilities to perform these essential functions.