Security Lead

Quick Facts

• Role: Security Lead

• Collaboration: Long-term, fully remote engagement with an international consulting client

Description

You will design and operationalize secure enterprise agent operations using a security-by-design approach within the Copilot ecosystem. The role covers security architecture and control mechanisms for M365 Copilot, Copilot Studio, and Azure AI Foundry, including identity/governance and data security.

You will also operationalize Microsoft Purview, Defender, and Sentinel for detection and incident response, validate controls via PoCs, and define operational ownership (e.g., RACI and runbooks).

Responsibilities

• Build and operationalize security-by-design for enterprise agent operations (security Agent365 approach)

• Define security architecture and control catalog for M365 Copilot, Copilot Studio, and Azure AI Foundry

• Align Agent365 security concepts with ZEISS Zenity, including observability, governance, monitoring, and security responsibility mapping

• Establish identity and access governance using Microsoft Entra and Entra Agent ID with least-privilege delegation

• Operationalize Microsoft Purview (sensitive labels, DLP, data protection), Defender, and Sentinel for agent threat detection and incident response

• Integrate agent operations with ITIL processes (incidents, problems, changes, service requests)

• Create RACI matrices, operational runbooks, and formal task handoffs to operational and security teams

• Validate control mechanisms via PoCs (inventory detection, identity lifecycle, sensitive data protection, threat detection, audit trails, evidence for access-rollback)

Requirements

• Several years of practical experience in Microsoft 365, Microsoft Defender, and Microsoft Security Copilot

• Very good knowledge of security frameworks

• English proficiency B2–C1 for smooth international communication

• ASAP availability preferred; maximum notice: up to one month, effective at month-end

Benefits

• Long-term cooperation

• Compensation: 160–190 PLN net/hour + VAT

• Support for establishing and running a business (for candidates without prior experience)

• Recruitment process: two technical interviews with managers (online, up to 1 hour each)

• Fully remote work

• Private medical care and Multisport card

• Modern equipment provided by the company, with software and configuration