Junior Security Engineer – Identity, Endpoint & Data Protection

About the role

OM Bank is looking for a Junior Security Engineer focused on Identity, Endpoint and Data Protection. Reporting to the Cloud Security Operations Lead, you will help secure the organisation’s users, devices and data using Microsoft security technologies and support incident response and risk remediation.

Key responsibilities

• Manage Azure AD/Entra ID, Conditional Access, PIM, MFA, RBAC and access package lifecycle governance.
• Administer endpoint protection tools, enforce compliance baselines, encryption, patching and secure configuration via Intune.
• Configure Microsoft Purview DLP, sensitivity labels and information governance across M365 services.
• Operate Microsoft Defender Vulnerability Management, track and remediate vulnerabilities.
• Automate policy deployment using PowerShell, Graph API and Intune.
• Fine‑tune Defender and Sentinel detections to reduce false positives.
• Produce dashboards and reports on device compliance, privileged access, DLP violations and vulnerability metrics.
• Contribute to the maturity of the Zero Trust ecosystem and security‑as‑code initiatives.

Required profile

• 2‑4 years of experience in Microsoft 365/Azure security engineering or a comparable enterprise security role.
• Strong analytical skills and a passion for modern security operations.
• Ability to work collaboratively with Cyber Defence, Risk Management and DevSecOps teams.

Required skills

• Microsoft E5 security tooling
• Azure AD / Entra ID
• Conditional Access
• Privileged Identity Management (PIM)
• Multi‑Factor Authentication (MFA)
• Role‑Based Access Control (RBAC)
• Access package lifecycle governance
• Microsoft Intune
• PowerShell scripting
• Microsoft Graph API
• Microsoft Defender Vulnerability Management
• Microsoft Purview Data Loss Prevention
• Sensitivity labels and information governance
• M365 services (Exchange, SharePoint, Teams, OneDrive)
• Microsoft Sentinel and SIEM integration
• Zero Trust security concepts