Security Engineer III - Microsoft defender

Requisition Number: 104311\n\nSecurity Engineer III \u2013 Microsoft Security \n\nLocation: This is a hybrid opportunity in Delhi NCR, Bangalore, Hyderabad, Gurugram area.\n\nShift: 24*7 Rotational Shifts\n\nInsight at a Glance\n\n * 14,000+ engaged teammates globally with operations in 25 countries across the globe.\n * Received 35+ industry and partner awards in the past year\n * $9.2 billion in revenue\n * #20 on Fortune\u2019s World\u0027s Best Workplaces\u2122 list\n * #14 on Forbes World\u0027s Best Employers in IT \u2013 2023\n * #23 on Forbes Best Employers for Women in IT- 2023\n * $1.4M+ total charitable contributions in 2023 by Insight globally\n\n\n\nNow is the time to bring your expertise to Insight. We are not just a tech company; we are a people-first company. We believe that by unlocking the power of people and technology, we can accelerate transformation and achieve extraordinary results. As a Fortune 500 Solutions Integrator with deep expertise in cloud, data, AI, cybersecurity, and intelligent edge, we guide organisations through complex digital decisions. \n\nAbout the team:\n\nWe are providing Security L1/L2/L3/Engineering support for Identity, Network, App Security, Email Security based on Microsoft, Zscaler, Cisco and other ISV Tools following the cloud security model that provides organizations with a range of security solutions and services. This service model is designed to help organizations protect their networks, systems, and data from a variety of security threats, such as cyberattacks, data breaches, and unauthorized access.\u200b\n\nAs a Security Engineer III, you\u0027ll-\n\nMicrosoft Defender Suite\n\n * Lead configuration, tuning, and optimization of Microsoft Defender XDR, Defender for Endpoint, and Defender for Office 365 to ensure maximum threat detection and minimal false positives.\n * Manage advanced threat protection policies, Safe Links, Safe Attachments, and real-time detections.\n * Investigate and respond to sophisticated threats detected by Defender XDR, performing root cause analysis and recommending preventive measures.\n\n\n\nMicrosoft Sentinel (SIEM/SOAR)\n\n * Architect and maintain Sentinel workbooks, analytics rules, hunting queries, and automation playbooks.\n * Correlate incidents across multiple data sources and perform proactive threat hunting.\n * Integrate Sentinel with Defender stack, Microsoft 365, Azure resources, and third-party security tools.\n\n\n\nMicrosoft Azure Security\n\n * Implement and manage Azure security controls, including Conditional Access, Identity Protection, and Security Center/Defender for Cloud.\n * Review and harden Azure configurations against best practices and compliance frameworks.\n\n\n\nMicrosoft Intune (Endpoint Management)\n\n * Design, configure, and manage Microsoft Intune for Mobile Device Management (MDM) and Mobile Application Management (MAM).\n * Deploy and enforce CIS benchmark-aligned security baselines via Intune for Windows endpoints.\n * Create and maintain compliance and configuration profiles for Windows, iOS, Android, and macOS devices.\n * Integrate Intune with Defender for Endpoint for automated device compliance actions.\n * Troubleshoot Intune policy conflicts, deployment failures, and device enrollment issues.\n\n\n\nIncident Response \u0026 Escalation\n\n * Act as L3 escalation point for complex incidents from L1/L2 SOC teams.\n * Lead incident triage, forensic investigation, and remediation coordination.\n * Provide post-incident reports and recommendations to improve detection and response.\n\n\n\nSecurity Optimization \u0026 Best Practices\n\n * Conduct regular health checks, policy reviews, and configuration audits across Microsoft security tools.\n * Align configurations with industry frameworks (NIST CSF, CIS Benchmarks, Zero Trust principles).\n * Mentor and guide junior engineers on advanced troubleshooting and optimization.\n\n\n\nWhat we are looking for-\n\n * B.E./B.Tech/Graduate in Computer Science, Cybersecurity, or related field.\n * Minimum 4\u20136 years in cybersecurity with at least 3 years in advanced Microsoft security engineering roles.\n * Exp on Tools \u0026 Technologies\n * Microsoft Defender XDR\n * Microsoft Defender for Endpoint\n * Microsoft Defender for Office 365\n * Microsoft Sentinel (SIEM/SOAR)\n * Microsoft Azure Security \u0026 Compliance\n * Microsoft Defender for Cloud\n * Kusto Query Language (KQL) for hunting and analytics\n * Certifications (Preferred):\n * Microsoft Certified: Security Operations Analyst Associate SC-200\n * Microsoft Certified: Azure Security Engineer Associate AZ-500\n * Skills:\n * Strong expertise in Microsoft Defender suite, Sentinel, and Azure security.\n * Proficiency in KQL for advanced threat hunting.\n * Deep understanding of email security, endpoint protection, and cloud security.\n * Experience with incident response, threat hunting, and security automation.\n\n\n\nSoft Skills\n\n * Strong analytical and problem-solving abilities.\n * Excellent communication and documentation skills.\n * Ability to work under pressure during critical incidents.\n * Leadership in guiding L1/L2 teams and collaborating with cross-functional stakeholders.\n\n\n\nWhat you can expect\n\nWe\u2019re legendary for taking care of you, your family and to help you engage with your local community. We want you to enjoy a full, meaningful life and own your career at Insight. Some of our benefits include:\n\n * Medical Insurance\n * Health Benefits\n * Professional Development: Learning Platform and Certificate Reimbursement\n\n\n\nBut what really sets us apart are our core values of Hunger, Heart, and Harmony, which guide everything we do, from building relationships with teammates, partners, and clients to making a positive impact in our communities.\n\nJoin us today, your Ambitious journey starts here.\n\nWhen you apply, please tell us the pronouns you use and any reasonable adjustments you may need during the interview process. \n \nAt Insight, we celebrate diversity of skills and experience so even if you don\u2019t feel like your skills are a perfect match - we still want to hear from you! \nToday\u0027s talent leads tomorrow\u0027s success. Learn more about Insight: \nhttps://www.linkedin.com/company/insight/\n\nInsight does not accept unsolicited resumes from recruiters or employment agencies. Unsolicited resumes will be treated as direct applications from the candidate, and recruiters or agencies who submit candidates for this position without a prior, written vendor agreement will not be eligible for any form of compensation, even if the candidate is hired.\n\nInsight is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, sexual orientation or any other characteristic protected by law.\n\nInsight India Location:Level 16, Tower B, Building No 14, Dlf Cyber City In It/Ites Sez, Sector 24 \u002625 A Gurugram Gurgaon Hr 122002 India\n