Microsoft 365 Security Engineer - onsite Plano
Indexed description
About The Role
Welltower is seeking a Microsoft 365 Security Engineer to engineer and operationalize security capabilities across email, identity, endpoint detection, and data protection. This role is a key engineering partner within Digital Workspace, helping translate workspace technology strategy into scalable, secure-by-design Microsoft 365 controls and operational standards.
The position partners closely with Digital Workspace, Security Operations, Messaging/Infrastructure, and Endpoint teams to implement secure collaboration, strengthen control effectiveness, and improve operational maturity. It is intentionally focused on Microsoft 365 security engineering rather than broader workplace technology domains such as telephony, print, digital signage, or physical security.
Key Responsibilities
Email Security (Primary Focus)
- Engineer and optimize core Microsoft 365 email security capabilities, including Defender for Office 365, Exchange Online Protection, and anti-phishing controls.
- Design secure mail flow, enforce best practices, and implement policy-driven protections across inbound, outbound, and internal messaging.
- Develop and maintain secure configuration standards for email protection, spoofing prevention, and user-facing collaboration controls.
- Lead technical response and continuous improvement efforts for phishing, business email compromise, and related messaging threats.
- Engineer, tune, and support Microsoft Defender capabilities, including Defender for Endpoint and Defender for Cloud Apps, with a focus on scalable enterprise deployment.
- Partner with endpoint engineering to align device posture, compliance signals, and Defender telemetry with Conditional Access and Zero Trust objectives.
- Improve detection fidelity, reduce false positives, and strengthen operational readiness through repeatable engineering standards and control validation.
- Collaborate with Security Operations on incident response, threat hunting, and continuous improvement of endpoint and cloud threat protections.
- Design, implement, and manage Microsoft Purview capabilities, including Data Loss Prevention, sensitivity labeling, classification, Insider Risk, and eDiscovery.
- Translate business and compliance requirements into scalable technical controls that support governance, data handling standards, and secure collaboration.
- Develop and maintain policy-aligned protection standards for sensitive information across Microsoft 365 workloads.
- Partner with stakeholders to validate control effectiveness, support investigations, and continuously improve information protection maturity.
- Support and help operationalize identity security controls, including Conditional Access, MFA/passwordless strategies, Privileged Identity Management, and secure access governance.
- Partner on lifecycle-oriented identity standards that improve authentication strength, reduce administrative risk, and support least-privilege access.
- Ensure engineering decisions align with Zero Trust architecture, enterprise security baselines, and broader Digital Workspace standards.
- Contribute to operational metrics, service improvements, and platform maturity initiatives across Microsoft 365 security services.
- Document engineering standards, technical decisions, implementation guidance, and supportable operational procedures.
- Partner across Digital Workspace, Security, Infrastructure, and service providers to improve reliability, policy enforcement, and control effectiveness.
- Support continuous improvement through automation, standardization, and repeatable engineering practices.
TRAVEL
Minimal travel is to be expected.
Minimum Requirements
- 5–7+ years of experience in Microsoft 365 security engineering within a complex enterprise environment.
- Deep expertise in Microsoft Defender, Exchange Online security and mail flow, Microsoft Purview, and core identity security controls.
- Experience implementing enterprise security baselines, secure configuration standards, and policy-driven controls at scale.
- Strong understanding of incident response workflows, control validation, and operational governance across Microsoft 365 platforms.
- Ability to translate security and compliance requirements into practical engineering solutions in partnership with security, infrastructure, and workplace technology teams.
- Competitive Base Salary + Annual Bonus
- Generous Paid Time Off and Holidays
- Employee Stock Purchase Program – purchase shares at a 15% discount
- Employer-matching 401(k) Program + Profit Sharing Program
- Student Debt Program – we’ll contribute up to $10,000 towards your student loans!
- Tuition Assistance Program
- Comprehensive and progressive Medical/Dental/Vision options
- Professional Growth
- And much more! https://welltower.com/newsroom/careers/
Our real estate portfolio is unmatched, located in highly attractive micro-markets with stunning built environments. Yet, we are an unusual real estate organization as we view ourselves as a product company in a real estate wrapper driven by relationships and unconventional culture.
Through our disciplined approach to capital allocation powered by our data science platform and superior operating results driven by the Welltower Business System, we aspire to deliver long-term compounding of per share growth and returns for our existing investors – our North Star.
Welltower is committed to leveraging the talent of a diverse workforce to create great opportunities for our business and our people. EOE/AA. Minority/Female/Sexual Orientation/Gender Identity/Disability/Vet
Create a free Caio profile to unlock more results and save your role and location preferences.
Unlock free search