Cloud Security Engineer
Location: Egypt
Focus Area: M365 E5 Security (Defender for Cloud, Defender for Cloud Apps, Defender for Identity, Defender for Office 365)
Role Summary:
Responsible for day-to-day administration, monitoring, and incident handling for Microsoft 365 security solutions. This includes monitoring Defender alerts, enforcing baseline security configurations, supporting user issues, and escalating advanced cases to L3. The role ensures M365 security tools are operating correctly and that cloud security policies are enforced consistently across collaboration services.
Responsibilities:
- Monitor Defender portals and Cloud App alerts; perform triage and remedial actions per defined playbooks.
- Implement baseline CASB policies, label enforcement, and support automatic classification tasks.
- Collect evidence for cloud incidents, initiate automated response actions, and escalate to L3 for complex cases.
- Maintain connectors to M365 workloads and verify health (log ingestion, sensor agent status).
- Produce weekly/monthly cloud security metrics and exception logs for management.
- Support policy tuning and false-positive reduction exercises.
- Provide user support for cloud security-related issues and coordinate with app owners during investigations.
Experience & Skills:
- 5+ years in cybersecurity with 2 – 4 years of operational experience with Microsoft 365 E5 security tools.
- Familiarity with Defender portals, CASB policy administration, and M365 alert triage.
- Ability to perform routine monitoring, basic investigations, and user support.
- Comfortable escalating complex cloud security incidents to senior engineers.
- Good understanding of operational security practices and docu
