Senior Microsoft Security Engineer_Riyadh,KSA

We are looking for a Senior Microsoft Security Engineer to lead the implementation and operation of Microsoft E5 security solutions. The ideal candidate will be responsible for configuring, managing, and optimizing Microsoft security tools while ensuring a strong security posture. The role is based in Riyadh, KSA

Since part of our infrastructure is based on Kubernetes, expertise in securing containerized environments using Microsoft security solutions is crucial. Additionally, this role requires integrating security logs into our SIEM solution for enhanced monitoring and threat detection.

Key Responsibilities

• Implement and manage Microsoft E5 security solutions:
• Microsoft Defender for Endpoint, Identity, Cloud, Office 365
• Microsoft Sentinel (SIEM & SOAR)
• Microsoft Purview (Compliance & DLP)
• Azure AD Security (MFA, Conditional Access, Identity Protection, PIM)
• Secure Kubernetes environments using Microsoft security tools.
• Develop and optimize security policies for on-prem and cloud workloads.
• Ensure security logs are properly forwarded to the SIEM (Microsoft Sentinel or others).
• Work with SOC teams to correlate logs, detect threats, and enhance security visibility.
• Automate security operations and threat response using SOAR & Microsoft security automation tools.
• Conduct security assessments, harden cloud workloads, and optimize Azure security configurations.
• Collaborate with DevOps teams to implement secure CI/CD pipelines and container security controls.
• Stay up to date with Microsoft security advancements and best practices.

Required Skills & Qualifications

• Strong hands-on experience with Microsoft E5 security tools.
• Expertise in securing Azure workloads and Kubernetes environments.
• Experience in SIEM log integration (Microsoft security logs to a centralized SIEM).
• Deep understanding of Azure Security Center, Defender for Cloud, and Sentinel.
• Strong knowledge of identity security (Azure AD, MFA, PIM, Conditional Access).
• Hands-on experience with EDR/XDR solutions and Microsoft Defender suite.
• Proficiency in Kubernetes security (RBAC, network policies, container runtime security).
• Strong scripting skills (PowerShell, KQL, Python, or Bash) for security automation.
• Knowledge of Zero Trust principles and security automation (SOAR, Logic Apps, Playbooks).

Required Certifications

Microsoft Security Certifications:

• SC-200 (Security Operations Analyst)
• SC-300 (Identity & Access Administrator)
• SC-400 (Information Protection Administrator)
• AZ-500 (Azure Security Engineer)

Kubernetes & Cloud Security Certifications:

• Certified Kubernetes Security Specialist (CKS)
• GIAC Cloud Security Automation (GCSA)
• GIAC Defensible Security Architecture (GDSA)

Only candidates with the required skills, experience and certifications and who are willing to relocate to Riyadh should apply to this role!