About the Role

We are looking for a Corporate Security Engineer to join our Global Platform Operations team. This is a hands-on technical role with a strong focus on Microsoft 365 security.

You will own and advance our security infrastructure across Entra ID, Intune, Defender, and related M365 tooling, while serving as an escalation point for complex IT support issues that go beyond the scope of our first-line support. Your work will directly shape the security posture of a cloud-first SaaS organization.

? This role is open in Mexico (Contractors)

What You Will Do

Security Engineering (Primary)

Own Entra ID configuration including Conditional Access policies, identity governance, privileged access controls (including just-in-time elevation via PIM or PAM and minimizing standing administrative access), and breakglass account procedures

Design, deploy, and maintain device compliance policies across Intune for Windows and macOS endpoints

Configure, tune, and validate our Microsoft Defender and Defender for Cloud Apps detection and own alert response workflows in coordination with our MDR provider, including periodic testing to confirm alerts fire as expected

Configure and operate data-exfiltration and insider-risk detection across the M365 estate including DLP, cloud-app anomaly detection, and insider-risk monitoring (e.g.

Microsoft

Purview or equivalent), and validate that these controls block and alert as intended

Design and own security automation for user offboarding, including controls that mitigate insider risk during privileged and departing-user transitions

Evaluate, implement, and maintain SaaS backup coverage across M365 workloads, Salesforce, and other critical platforms

Drive user lifecycle automation improvements.

Administer and tune endpoint management tooling including ThreatLocker, Intune, and Addigy

Identify and close security gaps across our SaaS estate, with a focus on identity, access, data-exfiltration prevention, and data protection





IT Operations Support (Secondary)

Serve as the escalation path for complex tickets that cannot be resolved by our first-line IT support specialist

Provide hands-on troubleshooting for M365, Entra ID, device management, and access issues

Contribute to IT runbook documentation and Confluence knowledge base upkeep

Support onboarding and offboarding processes for technically complex cases

What We Are Looking For

Required

4+ years of hands-on experience in IT security or security engineering roles

Deep working knowledge of Microsoft Entra ID, Conditional Access, identity governance, app registrations, privileged roles, and authentication methods including FIDO2/passkeys

Practical experience with Microsoft Intune for Windows and Addigy for macOS devices

Proficiency with Microsoft Defender and the M365 security portal

Hands-on experience with data loss prevention (DLP) and cloud or insider-risk anomaly detection, for example Purview DLP, Defender for Cloud Apps, Purview Insider Risk Management, or an equivalent third-party tool

Experience administering core M365 services, Exchange Online, SharePoint, Teams, OneDrive, including licensing, transport rules, and shared mailbox management

Strong English communication skills, written and verbal; you will work closely with US-based leadership and stakeholders

Ability to work independently and drive projects to completion without close supervision

Demonstrated, hands-on use of AI tools (e.g. Claude) in your day-to-day work to increase your own effectiveness, drafting scripts and automations,



accelerating investigation and analysis, or speeding up documentation, paired with sound judgment about using them responsibly with sensitive data. We expect you to already work this way, not to be planning to start.

Nice to Have

Familiarity with compliance frameworks such as SOC 2 or ISO 27001, and experience supporting evidence collection or audit preparation

Experience with Drata or similar compliance automation platforms

Experience with ThreatLocker or similar application allowlisting tools

Experience evaluating and implementing SaaS backup solutions such as Druva, Spanning, or Veeam

Experience with insider-risk or data-exfiltration monitoring tooling, Purview Insider Risk Management, Microsoft Defender for Cloud Apps, or specialist platforms such as Code42 Incydr

Scripting and automation skills (PowerShell, Python, or Bash) and comfort working in Linux

What Success Looks Like In your first six months, you will have taken ownership of our Conditional Access enforcement initiative, closed meaningful gaps in our SaaS backup coverage, and established yourself as the go-to escalation resource for identity and access issues. You will understand our environment deeply enough to make and execute good decisions independently, and you will have reduced the IT security workload that currently sits with the Head of Security and Infrastructure. You will also have configured and validated exfiltration and insider-risk alerting — demonstrated to fire against a simulated departing-employee scenario — and stood up a security offboarding runbook.

What We Offer

Fully remote position with adaptable working arrangements

Competitive compensation benchmarked to your local market A lean, technically capable team where your work has direct visibility and impact

Opportunity to own and shape the security infrastructure of a growing SaaS company Engageware is an equal opportunity employer.

📌 Corporate Security Engineer (México)
🏢 Engageware
📍 México