Security Engineer

Job Title: Security Engineer SecOps-Endpoint Management (Intune / O365 / Defender) macOS

Location: Hyderabad

Department: IT / Security

Role Type: Full-Time, Hands-On

We are seeking a hands-on Security & Endpoint Management Engineer to manage and secure our macOS-centric environment using Microsoft Intune, Microsoft 365 Security, Defender, Entra ID, and Purview. The role focuses on deploying, monitoring, and troubleshooting macOS devices while strengthening security, compliance, and Zero Trust posture across the organization.

Key Responsibilities

• Manage Intune macOS policies: configuration profiles, compliance, system/kernel extensions, app deployment, patching, and Defender onboarding.
• Monitor Azure AD/Entra security: Conditional Access, MFA, identity protection, Zero Trust enforcement, and device compliance.
• Operate Microsoft Defender (Endpoint, Office 365, Cloud Apps) and respond to security alerts and incidents.
• Configure Purview DLP, Sensitivity Labels, Retention Labels, auto-labeling, and data-protection policies across Email, SharePoint, OneDrive, Teams, and endpoints.
• Administer and secure O365 services: Exchange, SharePoint, OneDrive, Teams, email hygiene, external sharing restrictions, and transport rules.
• Perform endpoint security hardening, vulnerability remediation, log review (Defender XDR, Intune, Entra logs), and ensure timely updates.
• Maintain documentation, SOPs, and audit support for HIPAA, SOC 2, ISO 27001.

Required Skills

• 36 years hands-on experience with: Intune (macOS), Entra ID, Defender for Endpoint (macOS), M365 Security, Purview DLP, Conditional Access, ATP/Safe Links/Safe Attachments.
• Strong macOS expertise (PPPC, full disk access, system extensions, profiles).
• Conduct regular security assessments and penetration tests across our infrastructure and applications
• Implement and maintain security controls for cloud infrastructure (AWS) and endpoints
• Design, build, and maintain SecOps pipelines and tooling
• Ability to troubleshoot, investigate using KQL, and work across IT/Security teams.

Preferred

• Knowledge of HIPAA, SOC 2, ISO 27001 controls.
• Scripting (Bash, PowerShell, Python).
• Relevant Microsoft certifications (MS-500, MD-102, SC-100).