Information Protection & Security Operations Engineer

This is a fully remote position, open to applicants in Poland.

📋 Description

• Oversee and enhance the controls of Microsoft Purview, which include Data Loss Prevention and Insider Risk Management.

• Design, implement, and optimize Microsoft Purview DLP policies for Exchange, SharePoint, OneDrive, Teams, endpoints, and cloud applications.

• Set up and manage Insider Risk Management, encompassing policy templates, indicators, Adaptive Protection, and case triage.

• Execute and sustain information classification, sensitivity labels, labeling policies, auto-labeling, and encryption measures.

• Administer retention, records management, communication compliance, and session and access policies for Defender for Cloud Apps.

• Track DLP and Insider Risk alerts, analyze policy matches, minimize false positives, and report on policy performance.

• Establish and document standards, processes, and runbooks for information protection.

• Assist with audits and compliance mandates such as ISO 27001, SOC 2, GDPR, and NIS2.

• Promote user awareness and adoption through policy tips, guidance, and training initiatives.

• Implement and configure security solutions like intrusion detection systems and endpoint protection technologies.

• Observe security systems and triage alerts via Microsoft Defender XDR and Microsoft Sentinel.

• Investigate security incidents and devise remediation strategies.

• Perform vulnerability assessments and coordinate remediation efforts with infrastructure and application teams.

• Formulate and enforce security policies and procedures.

• Develop and enhance detection rules, automation processes, and playbooks.

• Offer technical guidance and support to fellow IT professionals.

• Collaborate closely with IT, HR, Legal, and Compliance teams.

⛳️ Requirements

• Practical experience in implementing and managing Microsoft Purview DLP and Insider Risk Management within a production setting.

• Solid understanding of sensitivity labels, information classification, encryption, and retention principles.

• Knowledge of data protection and privacy laws and frameworks, including GDPR, ISO 27001, and NIS2.

• Capability to balance security needs with user productivity.

• Ability to engage sensitively with HR, Legal, and Compliance on insider risk matters.

• Familiarity with firewalls, intrusion detection systems, and endpoint protection solutions.

• Understanding of networking concepts and operating systems.

• Knowledge of security principles and industry best practices.

• Experience with SIEM and XDR tools, including proficiency in KQL queries.

• Capacity to work effectively under pressure and respond swiftly to security incidents.

• Awareness of current CVEs and emerging threats, including tracking, assessment, and coverage.

• Strong analytical and problem-solving abilities.

• Excellent communication and collaboration skills.

• Ability to convey data protection and security concepts to non-technical audiences.

• Discretion and sound judgment when dealing with confidential and sensitive information.

• A bachelor's degree in computer science, information technology, information security, or a related field is generally required.

• Relevant certifications such as Microsoft SC-401, SC-200, AZ-500, CompTIA Security+, or CISSP may be advantageous.

• Potential security clearance and background checks, including criminal record declarations, right to work verification, personal identification, and work history confirmation.

🏝️ Benefits

• Flexible Leave Paid Time Off policy.

• Opportunities for remote work.

• Global Wellbeing Days.

• Growth opportunities, tools, and guidance.

• Access to talented colleagues, role models, and mentors.

• Engagement in sustainability initiatives, including an Environmental, Social, and Governance strategy and the Act4Good program.

• A safe and inclusive working environment.

• Employee Resource Groups available to everyone.

• Commitment to equal opportunity.

• Security clearance and background checks managed in accordance with local privacy laws.