M365 Security Engineer

Flowable is a leading provider of intelligent process and case automation solutions, trusted by global enterprises to power mission-critical business operations. With our next-generation Agentic Case Platform, we orchestrate people, systems, and AI to deliver real business outcomes – faster, smarter, and with greater agility. This is an ideal position for an experienced and proactive Microsoft 365 Security Engineer who enjoys solving technical challenges, protecting our cloud environment, supporting colleagues, and ensuring a secure and seamless IT experience across the organization. Responsibilities: - Own the security posture of our Microsoft 365 and Entra ID tenant: Define and maintain security baselines (Microsoft Secure Score, CIS benchmarks), drive continuous hardening, and apply Zero Trust principles across identities, devices, and data. - Detect and respond to threats: Monitor, investigate, and remediate security alerts and incidents using Microsoft Defender XDR (Defender for Office 365, Endpoint, Identity, and Cloud Apps) and Microsoft Sentinel. Contribute to incident response playbooks and post-incident reviews. - Administer Entra ID and SaaS applications: Handle identity lifecycle, Conditional Access, MFA/SSPR, phishing-resistant authentication, role assignments, Privileged Identity Management (PIM), Identity Protection, access reviews, SSO configuration, and secure SaaS onboarding. - Protect data and support compliance: Implement and tune Microsoft Purview controls (DLP, sensitivity labels, retention, insider risk, and audit) and secure external sharing. Support compliance requirements and audits for frameworks such as ISO 27001 and SOC 2. - Manage Exchange Online and messaging security: Oversee mail flow, connectors, message traces, delivery issues, and tenant-level configuration. Maintain DNS, certificates, email authentication (MX, SPF, DKIM, DMARC), transport rules, and antispam/antiphishing policies. - Administer collaboration and endpoint services: Manage Teams, SharePoint Online, OneDrive, and Intune, ensuring secure collaboration, device management, device compliance, endpoint hardening (e.g., BitLocker, attack surface reduction rules, patching), and compliance with policies. - Operational support and process governance: Maintain SOPs, documentation, and configuration baselines; handle ticket escalations and contribute to ITIL processes (incident, problem, change). Automate security and administrative tasks with PowerShell and Microsoft Graph. Qualifications: - Proven Microsoft 365 experience: At least 5 years in enterprise environments, including at least 2–3 years with a strong security focus. Experience with Microsoft 365 administration, including Exchange Online, Teams, SharePoint, OneDrive, and Entra ID. - Entra ID and security skills: Practical experience with identity lifecycle, Conditional Access, MFA/SSPR, authentication methods, role assignments, identity governance, PIM, Identity Protection, DNS, certificates, and email authentication standards (SPF, DKIM, DMARC). - Security operations: Hands-on experience with Microsoft Defender XDR stack and Microsoft Sentinel (or another SIEM), including alert triage, threat hunting with KQL, and incident response. - Data protection and compliance: Practical experience with Microsoft Purview (DLP, sensitivity labels, retention, audit) and familiarity with security frameworks such as ISO 27001, SOC 2, NIST, or CIS. - Device and endpoint management: Experience with Microsoft Intune, Defender for Endpoint, enterprise device management solutions, endpoint hardening, and Azure fundamentals (RBAC, monitoring, basic networking relevant to Microsoft 365). - Automation and tools proficiency: PowerShell and Microsoft Graph skills for Microsoft 365/Entra ID tasks, familiarity with IT support tools, ticketing systems (Atlassian stack) and remote support software. - ITIL and operational mindset: Understanding of ITIL processes (incident, problem, change), technical documentation, and problem-solving with a proactive approach. - Communication and analytical skills: Excellent communication, strong customer service mindset, solid troubleshooting abilities, the ability to explain security risks clearly to non-technical colleagues, and the ability to work independently under pressure. Fluent English required. - Security certifications such as SC-200, SC-300, SC-401, AZ-500, or CompTIA Security+, or equivalent education. Why Flowable: - Impact: Take ownership of the security of the cloud-based messaging, identity, and collaboration services our teams rely on worldwide. - Company culture: Enjoy direct communication, flat hierarchies, and a collaborative atmosphere with team activities. - Flexibility: Benefit from remote work options, flexible hours, and dedicated training opportunities. - Career growth: Flowable is growing, and so can you. Take ownership, learn fast, and evolve your career while shaping the future of IT and security services in a dynamic tech company. In accordance with Article 18(3ca) § 2 of the Labor Code, we ensure transparency of remuneration, which will be provided on demand during the job interview.