Corporate Security Engineer

About the Role

We are looking for a Corporate Security Engineer to join our Global Platform Operations team. This is a hands-on technical role with a strong focus on Microsoft 365 security.

You will own and advance our security infrastructure across Entra ID, Intune, Defender, and related M365 tooling, while serving as an escalation point for complex IT support issues that go beyond the scope of our first-line support. Your work will directly shape the security posture of a cloud-first SaaS organization.

This role is open in Mexico (Contractors)

What You Will Do

Security Engineering (Primary)

• 
  
• Own Entra ID configuration including Conditional Access policies, identity governance, privileged access controls (including just-in-time elevation via PIM or PAM and minimizing standing administrative access), and breakglass account procedures
  
• Design, deploy, and maintain device compliance policies across Intune for Windows and macOS endpoints
  
• Configure, tune, and validate our Microsoft Defender and Defender for Cloud Apps detection and own alert response workflows in coordination with our MDR provider, including periodic testing to confirm alerts fire as expected
  
• Configure and operate data-exfiltration and insider-risk detection across the M365 estate including DLP, cloud-app anomaly detection, and insider-risk monitoring (e.g. Microsoft Purview or equivalent), and validate that these controls block and alert as intended
  
• Design and own security automation for user offboarding, including controls that mitigate insider risk during privileged and departing-user transitions
  
• Evaluate, implement, and maintain SaaS backup coverage across M365 workloads, Salesforce, and other critical platforms
  
• Drive user lifecycle automation improvements.
  
• Administer and tune endpoint management tooling including ThreatLocker, Intune, and Addigy
  
• Identify and close security gaps across our SaaS estate, with a focus on identity, access, data-exfiltration prevention, and data protection
  

IT Operations Support (Secondary)

• 
  
• Serve as the escalation path for complex tickets that cannot be resolved by our first-line IT support specialist
  
• Provide hands-on troubleshooting for M365, Entra ID, device management, and access issues
  
• Contribute to IT runbook documentation and Confluence knowledge base upkeep
  
• Support onboarding and offboarding processes for technically complex cases
  

What We Are Looking For

• 
  
• 4+ years of hands-on experience in IT security or security engineering roles
  
• Deep working knowledge of Microsoft Entra ID, Conditional Access, identity governance, app registrations, privileged roles, and authentication methods including FIDO2/passkeys
  
• Practical experience with Microsoft Intune for Windows and Addigy for macOS devices
  
• Proficiency with Microsoft Defender and the M365 security portal
  
• Hands-on experience with data loss prevention (DLP) and cloud or insider-risk anomaly detection, for example Purview DLP, Defender for Cloud Apps, Purview Insider Risk Management, or an equivalent third-party tool
  
• Experience administering core M365 services, Exchange Online, SharePoint, Teams, OneDrive, including licensing, transport rules, and shared mailbox management
  
• Strong English communication skills, written and verbal; you will work closely with US-based leadership and stakeholders
  
• Ability to work independently and drive projects to completion without close supervision
  
• Demonstrated, hands-on use of AI tools (e.g. Claude) in your day-to-day work to increase your own effectiveness, drafting scripts and automations, accelerating investigation and analysis, or speeding up documentation, paired with sound judgment about using them responsibly with sensitive data. We expect you to already work this way, not to be planning to start.
  

Nice to Have

• 
  
• Familiarity with compliance frameworks such as SOC 2 or ISO 27001, and experience supporting evidence collection or audit preparation
  
• Experience with Drata or similar compliance automation platforms
  
• Experience with ThreatLocker or similar application allowlisting tools
  
• Experience evaluating and implementing SaaS backup solutions such as Druva, Spanning, or Veeam
  
• Experience with insider-risk or data-exfiltration monitoring tooling, Purview Insider Risk Management, Microsoft Defender for Cloud Apps, or specialist platforms such as Code42 Incydr
  
• Scripting and automation skills (PowerShell, Python, or Bash) and comfort working in Linux
  

What Success Looks Like

In your first s