Overview
We are seeking a skilled Cyber Security professional to join our Managed Security Centre, specifically focusing on Microsoft Purview and Insider Risk Management within a fully remote setup. The contractor will work with a technical security team to identify insider threats, protect sensitive business data, and support enterprise clients in managing complex Microsoft 365 environments, enhancing detection capabilities while ensuring compliance with security standards.
Responsibilities
- Investigate insider risk alerts across Microsoft Purview.
- Analyse user activity to identify potential data security risks.
- Support responses to suspected data exfiltration and policy breaches.
- Collaborate with technical teams to improve detection rules and reduce false positives.
- Produce clear investigation reports for technical and business stakeholders.
- Maintain accurate case documentation to support audit requirements.
- Engage with clients throughout complex investigations.
Requirements
- Experience in a Security Operations Centre or Cyber Security team.
- Hands-on knowledge of Microsoft security technologies.
- Experience with Microsoft Purview Insider Risk Management.
- Familiarity with Microsoft 365 Security and Compliance tools.
- Knowledge of Entra ID, Purview DLP, and Microsoft Audit Logs.
- Strong analytical and investigative skills.
- Excellent communication and report writing abilities.
- Desirable certifications: Microsoft SC-200, Microsoft SC-401, CDPSE (or willing to achieve).