IT Security Engineer (M365)
Horizontal

Job Info

Job Description

The cloud security engineer will work closely with the M365 team, Security Architecture and other teams to help deploy and operate a secure cloud application infrastructure that aligns with business needs. The position is responsible for supporting operational innovation and providing documented Security Configuration Standards to elevate the company's security posture within the M365 infrastructure. The cloud security engineer will work collaboratively with other teams to help deliver secure applications with resiliency to support business initiatives. The cloud security engineer is also expected to possess advanced administrative and troubleshooting skills, and be knowledgeable about engineering design principles. The cloud security engineer should be adept at dealing with disparate applications and data systems to maintain the level of rigor required to adhere to business direction. Along with depth of system coverage, the role requires planning and design of policies and maintenance.



Job Duties

* Develop, document and maintain secure cloud processes in tandem with architects and system engineers.

* Work with other team members to deploy, configure and maintain DLP and CASB solutions

* Work with other Security Engineers to ensure other Security Controls such as Network Security Governance, Logging and Monitoring and Data Protection are all included in the overall M365 solution.

* Work with teams across the business as they begin to leverage M365 to understand requirements and ensure proper Security Controls are put into place.

* Collaborate with Legal, Privacy and RIM to ensure all stakeholder security requirements are met in documented Security Standards.

* Protect business applications in compliance with privacy, security, business resiliency and compliance frameworks as defined in corporate policies.

* Ensure the M365 environment configuration meets agreed upon Security Standards by developing a secure configuration monitoring strategy. Conduct oversight of security systems and security configuration administration to reduce risk to enterprise data, systems and accounts.

* Attend regular technical project and implementation meetings, and serve as a security consultant to help guide secure application and infrastructure configurations.

* Actively monitor, assess and recommend tactical and strategic initiatives based on new and emerging threats posing risk to M365.

* Communicate necessary remediation efforts after security assessment findings outline weaknesses requiring attention.

* Document, formulate and enforce areas of security improvement that balance risk with business operations and do not diminish efficiencies or innovation.

* Attend and fully engage in change and project management meetings.

* Perform other duties as assigned.