M365 Security Engineer

Security-focused M365 Engineer with 5+ years in cybersecurity/security operations. Lead for security operations, incident response, and tooling (Microsoft Purview, Defender, Entra). Collaborates with SOC partners to monitor, investigate, and respond to alerts across cloud, on-premises, and SaaS environments. Designs and implements Zero Trust controls (Conditional Access, PIM, RBAC, identity governance); maintains policies aligned with ISO 27001 and NIS2; supports vulnerability management, audits, and third-party risk assessments; produces incident, threat, and compliance reporting; and drives continuous improvement of security controls and tooling. University-level IT/cybersecurity education or equivalent professional experience preferred.