Senior Microsoft Security Consultant (M365 & Defender)

Role : Senior Microsoft Security Consultant (M365 & Defender)

Duration : Long term Contract

Locations : Kuala Lumpur

Budget :Negotiable

About the Role:

This role is from Grug Consulting

Required Skills

The skill needed mostly M365 Security element such as Defender, customer key, Data Lifecycle Microsoft M365, Data Loss Prevention M365, etc.

This is for financial sector requiring on-site work presence especially dealing with workshops, design, implementation face to face with customer.

Job Description:

We are seeking a Microsoft 365 Security & Compliance Engineer to plan, design, configure, and implement Microsoft security, compliance, and data protection solutions across enterprise environments.

Key Responsibilities

Microsoft 365 Customer Key & Tenant Security

Enable and configure Customer Key (BYOK) for Exchange, SharePoint, OneDrive, and multi-workloads

Create and assign data encryption policies across tenant users and workloads

Support Hybrid Identity, Hybrid Exchange, and Information Protection tenant keys

Replicate Production M365 configurations to UAT environments using Microsoft365DSC

Microsoft Defender Implementations

Defender for Endpoint: Deploy and onboard Windows, macOS, iOS, and Android devices (up to 5,000 endpoints)

Defender for Identity: Configure MDI across AD forests, deploy sensors on domain controllers, tune detections, and manage false positives

Defender for Office 365: Configure EOP, anti-spam, anti-phishing, Safe Links, Safe Attachments, and email authentication (SPF, DKIM, DMARC)

Defender for Cloud Apps: Enable Shadow IT discovery, policy configuration, app sanctioning, automation, SIEM integration, and API integrations

Defender for Servers: Activate and integrate Defender for Servers with Endpoint (EDR)

Information Protection & Data Loss Prevention

Design data classification schemas and sensitivity labels across Microsoft 365

Implement Microsoft DLP policies for email, SharePoint, OneDrive, Teams, and endpoints

Configure Endpoint DLP and Cloud Apps file policies

Data Governance & Compliance

Implement Data Lifecycle Management (retention, deletion, adaptive scopes, automated labeling)

Configure eDiscovery (Standard & Premium) including cases, searches, reviews, exports, and compliance boundaries

Key Skills & Technologies

Microsoft 365 Security & Compliance

Microsoft Defender (Endpoint, Identity, Office 365, Cloud Apps, Servers)

Information Protection, DLP, BYOK

Azure AD / Entra ID, Hybrid Identity

Microsoft Purview (eDiscovery, Data Lifecycle)

SIEM integrations, Power Automate