Senior IT Security Engineer (Microsoft Defender)

Quick Facts

• Role: Senior IT Security Engineer (Microsoft Defender)

• Focus: Microsoft Defender for Endpoint, Cloud Apps, Office 365, and Identity

Description

You will plan and implement the introduction of Microsoft Defender solutions (Defender for Endpoint, Cloud Apps, Office 365, and Identity) and continuously develop the environment. The role connects Defender products into an integrated solution for threat detection and coordinated responses. You will integrate security events into a central SIEM, create detection rules, and automate reactions using SOAR playbooks.

Responsibilities

• Plan and implement Defender for Endpoint, Cloud Apps, Office 365, and Identity; continuously evolve the environment

• Connect Defender products into an end-to-end solution for detection and coordinated response

• Integrate security events into a central SIEM; develop detection rules

• Automate reactions with SOAR playbooks

• Assess existing security solutions and on-prem IT structures and migrate them into the Defender environment

• Evaluate alerts, analyze security incidents, and derive suitable countermeasures; continuously adjust policies, configurations, and detection rules

• Advise internal teams on security topics; closely collaborate with IT operations and business areas; document architecture and operating processes

Requirements

• Several years of professional experience in IT security

• Practical experience introducing and operating Microsoft Defender products

• Knowledge of Microsoft 365 and Entra ID

• Experience migrating established IT and security structures to modern solutions

• Practical experience with central event analysis, cross-product threat detection, and automated reactions via SIEM, XDR, and SOAR (Microsoft Sentinel is a plus)

• Structured analysis of complex security topics; ability to derive understandable, traceable measures and coordinate them with stakeholders

• Ideally: knowledge of KQL, PowerShell, Conditional Access, or Compliance; relevant Microsoft Security certifications are a plus

• German language skills at C1 level or higher (spoken and written)

Benefits

• Secure job with attractive compensation and typically unlimited contract

• Flexible working hours; up to 60% mobile work

• 30 vacation days plus three paid days off per year

• Workation up to 30 days in the European Economic Area (subject to team alignment)

• Career support: part-time study, trainings, and talent-management

• Modern offices in central locations (incl. rooftop terrace and underground parking)

• Corporate benefits: discounted Germany ticket, subsidized childcare, employee events