SECOPS Engineer – M365

Fulcrum Pvt Ltd is looking for a "
SECOPS Engineer – M365
" for our leading client.

The Grade for the position is Manager/AVP II.

SECOPS Engineer – M365 Budget: 300,000 to 400,000

Location : Onsite Karachi

Reporting to: Head of IS Operations / CISO

Key Responsibilities:

·Configure and maintain email and endpoint DLP policies to prevent unauthorized data sharing or leakage.

·Identify sensitive data across endpoints and emails and enforce appropriate controls for protection.

·Continuously assess the effectiveness of DLP policies and make necessary adjustments to reduce risk.

·Collaborate with business units to understand data protection needs and implement tailored DLP controls.

·Administer and enforce Microsoft Information Protection (MIP) solutions, including sensitivity labels, rights management, and classification of sensitive data.

·Manage and configure M365 Defender to monitor, detect, investigate, and respond to security incidents across Microsoft environments.

·Lead or assist in the investigation and remediation of security incidents related to email, endpoint, and data leakage.

·Collaborate with cross-functional teams to continuously improve security posture and reduce risk.

·Stay up to date with the latest trends, threats, and vulnerabilities in email, endpoint, and M365 security.

Required Trainings & Skills

·Microsoft Certified: Security, Compliance, and Identity Fundamentals.

·Microsoft Certified: Security Operations Analyst Associate.

·Experience with other security technologies such as SIEMs, firewalls, VPNs, and encryption solutions.

·Knowledge of scripting and automation to streamline security processes (PowerShell, Python, etc.).

·Strong analytical, problem-solving, and communication skills.

Qualifications & Experience

·Bachelor's degree in computer science, Information Security, or related field, or equivalent practical experience.

·3+ years of experience in Security Operations or IT security roles, with specific experience in M365 Defender, DLP, rights management, and data classification.

·Strong hands-on experience with Microsoft 365 Defender (Defender for Endpoint, Defender for Office 365, etc.).

·Familiarity with Microsoft Information Protection (MIP), sensitivity labels, rights management, and classification tools.

·Experience configuring, implementing, and monitoring Data Loss Prevention (DLP) solutions, particularly in an email and endpoint environment.

·Understanding of information security concepts, risk management, and compliance frameworks (NIST, ISO 27001, GDPR, etc.).

·Experience in troubleshooting security issues, investigating incidents, and performing root cause analysis.

·Solid understanding of security technologies such as SIEM, EDR, and endpoint protection.