Kloudynet is a leading cybersecurity company with a strong partnership with Microsoft. As a Microsoft Solutions Partner in Modern Work and Security, we hold advanced specializations across key areas such as Threat Protection, Identity and Access Management (IAM), and Data Security. We are also a Microsoft FastTrack Partner and a proud member of the Microsoft Intelligent Security Association (MISA). Kloudynet provides consulting, implementation, and managed security services, along with Security Operations Center (SOC) support, to medium and large enterprise customers across the ASEAN region. We are currently seeking a highly skilled Resident Engineer for ENTRA (Advanced Security) for our client which is a leading organization in Malaysia. The REs will perform the following activities within the Client environment.
Key Responsibilities:
Threat Protection Management (Microsoft Defender Suite):
- Day-to-day Operations: Monitor security dashboards (Microsoft 365 Defender Portal); manage and tune security policies (Defender for Endpoint AV/EDR/ASR, Defender for Office 365 anti-phishing/malware/Safe Links/Attachments, Defender for Identitydetections, Defender for Cloud Apps access/session policies); triage and escalate critical alerts.
- Monitoring & Health: Continuously monitor the health and effectiveness of Defender services; analyze security trends and incidents within the Client environment.
- Optimization: Fine-tune detection rules and policiesacross the Defendersuite to reducefalse positives and improve true positive rates.
- Troubleshooting & Incident Support:Act as an escalation point for complexissues related to Defender services; assist Client's SOC/Incident Response team in investigations by providing expert analysis of ENTRA security logs and tool capabilities.
Identity Security and Governance (Entra ID Premium P2 Features):
- Policy Management: Configure and manage Entra ID Identity Protection policies (user risk, sign-in risk); configure and manage Privileged Identity Management (PIM) roles, eligibility, and activation settings.
- Monitoring:Monitor identity risk events and PIM activation requests/audits, identify and investigate anomalous identity activities.
- Optimization: Tune risk detection levelsin Identity Protection; refining PIM role assignments and approval workflows.
- Troubleshooting: Investigate unexplained risk detection and PIM assignment/activation failures.
Cross-Functional Security Activities:
- Documentation: Maintain comprehensive documentation for Client's ENTRA Security configurations, operational procedures, incidentresponse playbooks (relatedto ENTRA tools),and knowledgebase articles.
- Reporting:Provide regular reports on Client's overall security posture based on ENTRA Security metrics (e.g.,Secure Score improvement, threat trends, identityrisk levels), activities performed, and strategic recommendations.
- KnowledgeTransfer: Conduct knowledge transfer sessions and mentoring for Client's security operations, IT administrators, and compliance teams on specific ENTRA Security tools and best practices.
- StrategicAdvice: Stay current with Microsoft ENTRA Security roadmapupdates, emerging threats, and industry best practices; provide proactive advice to Client on leveraging new security features, enhancing configurations, and adapting to the evolving threat landscape.
- Collaboration: Work closely with Client's Security Operations Center (SOC), incident response, identity management, compliance, network, and infrastructure teamsto ensure holisticsecurity integration and alignment.
Qualifications:
- Proven hands-on experience (typically 3-5 years) deploying, managing, and optimizing multiple components of the Microsoft 365 ENTRA Security suite in large enterprise environments.
- Deep expertise in Microsoft Defenderfor Endpoint, Defenderfor Office 365, Defender for Identity, and Defender for Cloud Apps.
- Strong experience with Microsoft PurviewInformation Protection and Data Loss Prevention.
- Proficiency in managing Entra ID P2 features (Identity Protection, PIM).
- Understanding of security frameworks (e.g., NIST, MITRE ATT&CK) and how ENTRA tools map to them.
- Experience in supporting change management and user adoption initiatives for security technologies and policies.
- Excellent analytical, problem-solving, communication, and documentation skills suitable for a security-focused role.