Security Consulting Practitioner (Practitioner)

Job Description:

• Experienced in Microsoft Purview advisory support, configuration guidance, and client-facing security and compliance engagement.
• Focus on L3 SME guidance, design-aligned troubleshooting, stakeholder coordination, go-live support, Hypercare advisory, and warranty issue resolution across Microsoft Purview workloads.
• Provide L3 SME support for Microsoft Purview activities aligned to Information Protection, Data Loss Prevention, Insider Risk Management, and Data Lifecycle Management.
• Support go-live by advising on label publishing, DLP simulation or enforcement, IRM policy activation, retention policy deployment, and configuration evidence review.
• Provide Hypercare guidance for Purview issues, including DLP false positive or negative tuning, label policy behavior, IRM alert triage, retention behavior, and Sentinel or Splunk alert routing.
• Review screenshots, policy status, validation outputs, logs, and configuration evidence shared by client teams.
• Advise on warranty issues attributable to signed-off Purview design or build/configuration guidance.
• Coordinate with compliance, SOC, IT security, and operations stakeholders to validate issues, clarify remediation guidance, and track closure.
• Maintain issue logs, advisory notes, RAID updates, resolution summaries, and phase closure inputs.

Required technical skills:

• Strong experience supporting Microsoft Purview in enterprise security or compliance environments.
• Hands-on knowledge of Purview Information Protection labels, DLP policies, Insider Risk Management scenarios, and Data Lifecycle Management retention policies.
• Ability to advise on signed-off Purview design and build guidance across Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams locations.
• Familiarity with Microsoft built-in Sensitive Information Types, SOC integration touchpoints, Sentinel or Splunk routing, and Purview issue tracking.
• Strong understanding of go-live, Hypercare, warranty support, stakeholder evidence review, and L3 escalation handling.

Requirements:

• Able to lead technical conversations with compliance, SOC, IT security, and operations stakeholders.
• Strong ownership, clear advisory communication, structured issue management, and practical judgment when guiding configuration evidence review, remediation options, and support closure activities.

Qualifications:

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field is preferred.
• Desirable Microsoft certifications include: SC-401, SC-200, SC-100, SC-300, AZ-500.

Preferred experience:

• Experience supporting Microsoft Purview in large enterprise or regulated enterprise environments.
• Exposure to Purview go-live, Hypercare, warranty support, and post-implementation stabilization activities.
• Experience advising on Information Protection, DLP, IRM, DLM, and SOC integration requirements using Sentinel or Splunk.
• Experience working with client-facing delivery teams and coordinating with compliance, SOC, IT security, and operations teams is beneficial.