Information Protection & Security Operations Engineer

This is a fully remote position, open to applicants in Portugal.

📋 Description

• Oversee and enhance Microsoft Purview controls, which encompass Data Loss Prevention, Insider Risk Management, and associated data protection policies.

• Design, implement, and fine-tune Microsoft Purview DLP policies across Exchange, SharePoint, OneDrive, Teams, endpoints, and cloud applications.

• Set up and manage Insider Risk Management, including policy templates, indicators, Adaptive Protection, and case triage.

• Execute and uphold information classification, sensitivity labels, label policies, auto-labeling, and encryption measures.

• Administer retention and records management, communication compliance, as well as Defender for Cloud Apps session and access policies.

• Track DLP and Insider Risk alerts, analyze policy matches, diminish false positives, and report on the effectiveness of policies.

• Define and document information protection standards, processes, and operational runbooks.

• Assist with audits and compliance obligations such as ISO 27001, SOC 2, GDPR, and NIS2.

• Promote user awareness and acceptance through policy tips, guidance, and training initiatives.

• Deploy and configure security solutions, including intrusion detection systems and endpoint protection.

• Monitor security systems and manage alerts within Microsoft Defender XDR and Microsoft Sentinel.

• Investigate security incidents and formulate remediation strategies.

• Conduct vulnerability assessments and coordinate remediation efforts with infrastructure and application teams.

• Develop and enforce security policies and procedures.

• Create and enhance detection rules, automation, and playbooks to minimize response times.

• Offer technical guidance and support to fellow IT professionals.

• Collaborate with IT, HR, Legal, Compliance, and both infrastructure and application teams.

⛳️ Requirements

• Practical experience in implementing and managing Microsoft Purview DLP and Insider Risk Management in a production setting.

• Solid understanding of sensitivity labels, information classification, encryption, and retention principles.

• Familiarity with data protection and privacy regulations and frameworks, including GDPR, ISO 27001, and NIS2.

• Ability to balance security needs with user productivity and work considerately with HR, Legal, and Compliance on insider risk matters.

• Knowledge of firewalls, intrusion detection systems, and endpoint protection mechanisms.

• Understanding of networking concepts and operating systems.

• Grasp of security principles and best practices.

• Experience with SIEM and XDR tools, including KQL queries for investigation and detection purposes.

• Capability to perform under pressure and respond promptly to security incidents.

• Awareness of current CVEs and emerging threats, with the ability to track, evaluate, and ensure comprehensive coverage.

• Strong analytical and problem-solving competencies.

• Effective communication and collaboration skills with non-technical stakeholders.

• Discretion and sound judgment in managing confidential and sensitive information.

• A bachelor's degree in computer science, information technology, information security, or a related discipline is generally required.

• Relevant certifications such as Microsoft SC-401, SC-200, AZ-500, CompTIA Security+, or CISSP may be advantageous.

• Background checks/security clearance might be necessary for customer projects and access to sensitive customer information.

🏝️ Benefits

• Flexible Leave Paid Time Off policy.

• Opportunities for remote work.

• Global Wellbeing Days.

• Growth opportunities, tools, and guidance for professional development.

• Talented colleagues, role models, and mentors.

• Sustainability initiatives including Environmental, Social, and Governance strategy and the Act4Good program.

• A safe and inclusive working environment.

• Employee Resource Groups that are open to all.

• Commitment to equal opportunity.

• Potential security clearance/background checks conducted in accordance with local privacy laws.