Security Engineer - Microsoft Purview, Endpoint and Data Protection

Security Engineer – Endpoint & Data Protection Hybrid variable - London or Birmingham We are currently recruiting for Security Engineer – Endpoint & Data Protection to join our growing client delivery business. About Us NTT DATA is one of the world's largest Global Security services providers with over 7500 Security SMEs and Integration partner to many of the worlds most recognised Security Technology providers. We strive to hire exceptional, innovative, and passionate individuals who want to grow with us. In a constantly changing world, we work together with our people, clients and communities to enable them to fulfil their potential to do great things. We believe that by bringing everyone together, we can solve problems using innovative technology that can create a world that is sustainable and secure. This is a great opportunity for you to play a pivotal role in helping to shape our client's transformation journeys. What to Expect

• Implementing and configuring Microsoft Purview for data governance and compliance.
• Designing and deploying Information Protection policies (AIP/MIP), including sensitivity labels, DLP and Insider Risk Management Policy configurations.
• Advising on strategies to prevent unauthorized data sharing and mitigate data leakage risks.
• Leveraging Microsoft Defender for endpoint monitoring, threat hunting, and incident response.
• Performing advanced threat investigations using KQL queries and Defender portals.
• Acting as a liaison for external services such as Microsoft Defender Experts for proactive threat hunting.
• Supporting vulnerability management initiatives using tools like Qualys, prioritizing remediation efforts, and aligning with CIS Benchmarks.
• Providing operational support for Zscaler and Proofpoint to ensure secure web access and email security.
• Contributing to projects aimed at improving security maturity against frameworks such as NCSC CAF, focusing on information protection, endpoint monitoring, and vulnerability management. What's Important It starts with amazing people, challenging projects and a work environment that supports the creation of tangible solutions that make an impact. You will need to have a security delivery background and evidence your experience in a number of the following fields of expertise:
• 2-3 Years experience managing Microsoft Security products.
• Microsoft Certified such as SC-100, SC-200, SC-400
• Design, implement, and manage Data Loss Prevention (DLP) policies and sensitivity labels.
• Develop and implement data governance policies using Microsoft Purview.
• Configure and monitor policies to detect, investigate, and act on malicious or unintentional activities.
• Experience with Microsoft Defender for endpoint security and threat hunting.
• Familiarity with KQL for advanced threat investigations.
• Experience in managing and monitoring Zscaler and Proofpoint.
• Strong knowledge of vulnerability management tools such as Qualys or similar.
• Understanding of CIS Benchmarks and security hardening practices. A good understanding of the protocols underpinning the web - TCP/IP, HTTP, SSL/TLS
• Extensive, multi-year project experience in complex environments.
• Ability to operate in demanding situations whilst still having relentless drive to deliver with enthusiasm.
• Strong influencer, with a wide range of styles, having ability to build good working relationships with delivery partners and senior levels within the organisation
• Hold Security engineering / technology certifications and Microsoft Azure certifications
• Ability to operate in demanding situations whilst still having relentless drive to deliver with enthusiasm.
• Work within a wide range of styles, having ability to build good working relationships with delivery teams and stakeholders
• Must be able to communicate with architects, business people, and technologists.
• Continued personal growth, and attaining further security qualifications and learning
• Willingness to learn new Security skills and build experience from working in different security domains
• We also work within Public Sector clients where UK Gov. Defence Vetting to such as SC is required, as such you hold or be eligible to hold UK Gov vetting.
• A valid right to work in the UK.
• We offer a range of tailored benefits that support your physical, emotional, and financial wellbeing. Our Learning and Development team ensure that there are continuous growth and development opportunities for our people. We also offer the opportunity to have flexible work options.
• You can find more information about NTT DATA UK & Ireland here: https://uk.nttdata.com/