L3 IT Security Engineer_M365

BigData Technology Solutions

Dubai, UAE

Full Time

Senior

Onsite

3 days ago

Microsoft 365 SecurityMicrosoft Entra IDConditional AccessKusto Query Language (KQL)Microsoft Defender XDRData Loss Prevention (DLP)

Apply

Free

Job Fit Check

Base Career helps you apply smarter for this job.

Ready to Scan

Key skills for this role

Microsoft 365 SecurityMicrosoft Entra IDConditional Access

Smart Apply

About the Role

BigData Technology Solutions seeks an experienced L3 M365 Security Engineer to serve as top-tier technical escalation for cloud security issues. You will diagnose complex infrastructure failures, respond to advanced threats, and optimize security policies across Microsoft 365.

Key Skills for This Role

Microsoft 365 SecurityMicrosoft Entra IDConditional AccessKusto Query Language (KQL)Microsoft Defender XDRData Loss Prevention (DLP)

Responsibilities

Act as the final escalation point for L1/L2 teams, resolving deep technical issues within Microsoft Entra ID, conditional access routing, and complex authentication flows
Lead deep dive forensic investigations using Advanced Hunting KQL queries in Microsoft Defender XDR to hunt for hidden threats and lateral movement
Resolve broken Data Loss Prevention (DLP) rules, misconfigured information protection labels, and synchronization failures within Microsoft Purview
Develop, test, and deploy Microsoft Graph API scripts and advanced PowerShell modules to automate incident remediation and policy enforcement
Review proposed changes from cloud architects, assess their impact on operations, and execute high risk production updates with minimal business disruption
Investigate security alerts, perform root cause analysis, and execute remediation actions in coordination with the wider IT/Security Operations Center (SOC) team
Configure and enforce security policies on mobile and desktop devices via Microsoft Intune
Conduct regular security assessments, maintain compliance with regulatory standards (e.g., ISO 27001, GDPR), and review audit logs
Conduct regular technical training sessions for L1/L2 engineering staff and author definitive Standard Operating Procedures (SOPs)

Requirements

5+ years of dedicated enterprise IT support experience
At least 3 years explicitly operating as a Tier 3 engineer in an M365 environment
Proven hands on capability writing complex Kusto Query Language queries to investigate security event logs
Deep understanding of hybrid identity management (Entra Connect), modern authentication protocols (SAML, OAuth, OIDC), and routing concepts
Microsoft Certified: Cybersecurity Architect Expert (SC100) or Microsoft Certified: Security Operations Analyst Associate (SC 200)
Exceptional logical reasoning, crisis management skills during active security incidents, and clear communication under high pressure scenarios

Full Job Posting

Job Overview

We are seeking an experienced L3 M365 Security Engineer to serve as our top tier technical implementation and escalation point for all cloud security issues.
Diagnose and resolve complex, systemic infrastructure failures, respond to advanced persistent threats, and continuously optimize security policies across the Microsoft 365 environment.
Bridge the gap between day to day operations and high level cloud architecture.

Key Responsibilities

Advanced Incident Escalation: Act as the final escalation point for L1/L2 teams, resolving deep technical issues within Microsoft Entra ID, conditional access routing, and complex authentication flows.
Threat Hunting & Forensics: Lead deep dive forensic investigations using Advanced Hunting KQL queries in Microsoft Defender XDR to hunt for hidden threats and lateral movement.
Complex Policy Troubleshooting: Resolve broken DLP rules, misconfigured information protection labels, and synchronization failures within Microsoft Purview.
Automation & Scripting: Develop, test, and deploy Microsoft Graph API scripts and advanced PowerShell modules to automate incident remediation and policy enforcement.
Architecture & Change Management: Review proposed changes from cloud architects, assess their impact on operations, and execute high risk production updates with minimal business disruption.
Incident Response: Investigate security alerts, perform root cause analysis, and execute remediation actions in coordination with the wider IT/SOC team.
Device & Endpoint Management: Configure and enforce security policies on mobile and desktop devices via Microsoft Intune.
Auditing & Governance: Conduct regular security assessments, maintain compliance with regulatory standards (e.g., ISO 27001, GDPR), and review audit logs.
Mentorship & Knowledge Transfer: Conduct regular technical training sessions for L1/L2 engineering staff and author definitive SOPs.

Qualifications & Requirements

Experience: 5+ years of dedicated enterprise IT support experience, with at least 3 years explicitly operating as a Tier 3 engineer in an M365 environment.
KQL Mastery: Proven hands on capability writing complex Kusto Query Language queries to investigate security event logs.
Advanced Infrastructure Knowledge: Deep understanding of hybrid identity management (Entra Connect), modern authentication protocols (SAML, OAuth, OIDC), and routing concepts.

Certifications

Microsoft Certified: Cybersecurity Architect Expert (SC100) or Microsoft Certified: Security Operations Analyst Associate (SC 200).

Soft Skills

Exceptional logical reasoning, crisis management skills during active security incidents, and clear communication under high pressure scenarios.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Trusted by over 500,000 job seekers on Base Career

Start Free Today