{"id":2111930,"url":"https://alion.io/job/square-one-resources-cybersecurity-engineer-microsoft-security-defender-entra-id-purview","title":"Cybersecurity Engineer – Microsoft Security, Defender, Entra ID & Purview","company":{"id":3913592,"name":"Square One Resources","domain":"squareoneresources.com","url":"https://alion.io/company/square-one-resources","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Traffit","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Warsaw, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":18000,"max":21000,"currency":"PLN","period":"month","gross":null,"usd_annual":64476},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"DLP","optional":false},{"name":"IAM","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-08T11:49:38Z","employer_posted_date":null,"last_verified_at":"2026-10-08T11:49:38Z","board_verified":false,"closed_at":null,"days_open":18,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":18},"description":"Project DescriptionWe are looking for a Mid-level Cybersecurity Engineer to join an international security engineering environment focused on the development, administration, and continuous improvement of Microsoft-based security solutions across cloud and on-premises environments.The project covers a broad range of cybersecurity areas, including security monitoring, threat detection, incident response, vulnerability management, identity and access management, endpoint security, cloud security, and security automation.The role will be particularly focused on advanced security capabilities within the Microsoft ecosystem, including Microsoft Defender, Microsoft Entra ID, Microsoft Purview, and Microsoft Sentinel.You will work in international, cross-functional teams and contribute to large-scale cloud and cybersecurity transformation initiatives.Recruitment ProcessThe recruitment process consists of three stages:Initial interview – approximately 60 minutes, online via MS Teams.\nTechnical interview – approximately 60 minutes, including technical knowledge verification.\nTeam interview + technical assessment – approximately 60 minutes, with the future team and additional technical verification.\nZakres obowiązków\nDesign, implement, configure, and continuously improve Microsoft security solutions across cloud and on-premises environments.\nManage and develop Microsoft Defender XDR, Defender for Endpoint, and Defender for Cloud capabilities.\nDevelop and maintain security monitoring and detection capabilities using Microsoft Sentinel and SIEM solutions.\nCreate, tune, and optimize detection rules, alerts, and security policies.\nMonitor security events, investigate suspicious activities, and support incident detection and response.\nParticipate in incident response activities, including investigation, containment, and remediation.\nSupport security investigations and forensic analysis when required.\nDevelop and maintain Data Loss Prevention (DLP) policies and controls, particularly within Microsoft Purview.\nConfigure and optimize Microsoft Purview security and compliance capabilities.\nSupport Endpoint Security and advanced antivirus/EDR protection, including Microsoft Defender for Endpoint.\nWork with Microsoft Entra ID to support Identity and Access Management, authentication, authorization, and access controls.\nContribute to the implementation of Zero Trust security principles.\nSupport vulnerability management activities, including vulnerability identification, assessment, prioritization, and remediation.\nContribute to Cloud Security initiatives within Microsoft Azure environments.\nDevelop scripts and automation using PowerShell and/or Python where applicable.\nCollaborate with security, infrastructure, cloud, and application teams in an international environment.\nContribute to the continuous improvement of security processes, standards, and technical controls.\nSupport large-scale cloud and cybersecurity transformation projects.\nWymagania\nRequirementsMust-have3+ years of professional experience in Cybersecurity, Security Engineering, or Security Operations.\nStrong and practical knowledge of the Microsoft security ecosystem.\nAdvanced knowledge of Microsoft Defender, including:Microsoft Defender XDR\nMicrosoft Defender for Endpoint\nMicrosoft Defender for Cloud\n\nAdvanced knowledge of Microsoft Entra ID (Azure AD).\nAdvanced knowledge of Microsoft Purview, including Data Loss Prevention (DLP) capabilities.\nPractical experience with Microsoft Sentinel and SIEM-based security monitoring.\nStrong understanding of Endpoint Security and modern antivirus/EDR solutions.\nGood understanding of Identity and Access Management (IAM).\nKnowledge of Zero Trust security principles.\nExperience with Security Monitoring and Incident Response.\nUnderstanding of Vulnerability Management processes and tools.\nKnowledge of Cloud Security, preferably within Microsoft Azure.\nAbility to investigate security incidents and analyze security events.\nAbility to work effectively in international, English-speaking, cross-functional teams.\nNice-to-haveExperience with PowerShell and/or Python for security scripting and automation.\nKnowledge of security frameworks and standards such as:NIST\nISO 27001\nCIS Controls\n\nMicrosoft security certifications, particularly:SC-100 – Microsoft Cybersecurity Architect\nSC-200 – Microsoft Security Operations Analyst\nSC-300 – Microsoft Identity and Access Administrator\n\nExperience supporting large-scale cloud and security transformation projects.\nExperience with security automation and development of automated response mechanisms.\nTechnology StackMicrosoft Defender XDR – Advanced\nMicrosoft Defender for Endpoint – Advanced\nMicrosoft Defender for Cloud – Advanced\nMicrosoft Entra ID – Advanced\nMicrosoft Purview – Advanced\nMicrosoft Sentinel – Advanced\nMicrosoft Azure – Regular\nPowerShell / Python – Nice to have\nSIEM solutions\nVulnerability Management tools\nTech stack\nCybersecurity\nSecurity\nCloud\nAzure AD\nData Loss Prevention\nDLP\nAntivirus\nEDR\nIAM\nCloud security\nMicrosoft Azure\nPowerShell\nPython\nNIST\nISO\nCIS\nSIEM","description_format":"text","description_chars":5078,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-08T22:25:03Z"}],"visa":[],"liveness":{"score":62,"band":"ok","label":"Likely open","p_open":0.85,"p_active":0.81,"p_room":0.9,"age_days":17,"expected_fill_days":30,"reasons":["seen:17","velocity","win:mid"],"computed_at":"2026-10-26T05:57:25Z"},"pay":{"stated_usd_annual":64476,"is_top_pay":false},"html_url":"https://alion.io/job/square-one-resources-cybersecurity-engineer-microsoft-security-defender-entra-id-purview","json_url":"https://alion.io/job/square-one-resources-cybersecurity-engineer-microsoft-security-defender-entra-id-purview.json","meta":{"generated_at":"2026-10-27T04:14:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3732,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3913592},"rest":"https://alion.io/mcp/rest/get_company?id=3913592"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsquare-one-resources-cybersecurity-engineer-microsoft-security-defender-entra-id-purview"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsquare-one-resources-cybersecurity-engineer-microsoft-security-defender-entra-id-purview"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsquare-one-resources-cybersecurity-engineer-microsoft-security-defender-entra-id-purview"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/square-one-resources-cybersecurity-engineer-microsoft-security-defender-entra-id-purview\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsquare-one-resources-cybersecurity-engineer-microsoft-security-defender-entra-id-purview"}]}