Security Operations Engineer

Avenga is an international engineering firm helping businesses operate with AI at the core. With 6,000+ experts worldwide, we combine engineering expertise with AI-native thinking to turn ambitious ideas into real-world impact across industries, technologies, and markets.

At the core of the role

We are looking for an experienced Microsoft Purview specialist to strengthen data protection across Microsoft 365 and supported AI services. You will assess existing configurations, design and optimize DLP policies, improve detection and incident handling, and implement effective controls to protect sensitive information. You will also help manage AI-related data protection risks, collaborate with security and business teams, and contribute to documentation and knowledge sharing.

Core skills you’ll bring

• At least 2 years of hands-on experience with Microsoft Purview

• Proven experience in implementing and managing Microsoft Purview DLP

• Practical knowledge of Microsoft Information Protection, Sensitivity Labels, and Sensitive Information Types

• Understanding of Insider Risk Management and Data Lifecycle Management

• Experience in designing and configuring monitoring of generative AI usage, including Microsoft Copilot and ChatGPT Enterprise, using Microsoft Purview

• Hands-on experience with Exchange Online, SharePoint Online, OneDrive for Business, and Microsoft Teams

• Ability to design, implement, and optimize DLP policies in production environments

• Ability to independently analyze business requirements and propose appropriate technical solutions and controls

• Excellent communication and documentation skills

Nice-to-have

• Experience with Endpoint DLP

• Knowledge of Microsoft Defender for Endpoint, Microsoft Defender XDR, and Microsoft Defender for Cloud Apps

• Experience with PowerShell automation and Microsoft Graph API

• Familiarity with Microsoft Security Copilot

• Experience in data protection within banking or other regulated industries

• Knowledge of GDPR, DORA, NIS2, and ISO 27001 requirements

The impact you'll create

• Design, configure, and optimize Microsoft Purview DLP policies

• Configure detection rules, alerts, enforcement actions, user coaching, and justified policy exceptions

• Leverage Sensitive Information Types, Trainable Classifiers, and Sensitivity Labels to strengthen data protection

• Test policies in audit and simulation modes before deploying validated changes to production.

• Analyze DLP incidents and minimize false positives

• Implement monitoring of AI tool usage and assess risks related to sensitive data processing

• Implement data protection controls for Microsoft 365 Copilot and other AI services supported by Microsoft Purview

• Prepare documentation and operational procedures and facilitate knowledge transfer to internal teams

• Collaborate with the Security Operations Center (SOC), Microsoft 365 administrators, and data owners

• Provide feedback on BizChat

What supports your journey

• Pleasant working environment and stable background in one of the largest software development companies

• Space to work independently and creatively with the possibility to implement your own ideas and opportunities to learn new things and approaches

• You have the opportunity to influence your direction in the company

• High quality hardware and software, access to the latest technologies and specific projects

• Opportunities to improve your language skills, we are a major global player

• At Avenga, you'll get quality support in your development thanks to a wide range of internal and external training courses, so you can push the boundaries of your competences

• We offer you benefits such as life insurance and pension contribution, EN/DE/ES lessons, MultiSport card, sick days, meal allowance, lots of company events, offices in Prague Palmovka quality amenities for lovers of sport, food and coffee, hybrid remote work after mutual agreement, and more

People are at the core of Avenga. We provide equal opportunities regardless of race, ethnicity, gender identity, sexual orientation, disability, age, religion, or any other characteristic. We are committed to a respectful environment where everyone can be themselves, share their ideas, and feel that they belong.