Workspace Security Engineer - APAC- Remote - 6k- Finteh

About the Role

We are looking for a Workspace Security Engineer to help secure and optimize our modern digital workplace. In this role, you will be responsible for protecting collaboration platforms, managing endpoint security, and ensuring device compliance across a hybrid workforce.

Working closely with IT, Security, and Infrastructure teams, you will implement Zero Trust principles, strengthen endpoint security, protect sensitive data, and support the secure adoption of AI-powered workplace technologies.

What You'll Do

• Secure and administer Microsoft 365 collaboration services, ensuring strong security, compliance, and data protection.
• Implement identity-based access controls using Microsoft Entra Conditional Access, including device compliance, MFA, and risk-based access policies aligned with Zero Trust principles.
• Manage external sharing and data governance across Microsoft Teams, SharePoint, and OneDrive through sharing controls, sensitivity labels, and guest access policies.
• Administer endpoint security across Windows, macOS, and Linux devices using MDM, MAM, and Endpoint Detection & Response (EDR) solutions.
• Implement and maintain endpoint hardening standards to improve compliance and reduce security risks.
• Configure and optimize Microsoft Purview Data Loss Prevention (DLP) policies to protect sensitive information across endpoints and collaboration platforms.
• Implement Endpoint Privilege Management (EPM) controls to manage and monitor privileged access.
• Configure browser security policies and web content filtering to reduce exposure to web-based threats.
• Monitor endpoint compliance and automate remediation of non-compliant devices.
• Partner with Infrastructure and IT teams to maintain secure endpoint and workplace environments.
• Support the secure adoption of AI-powered workplace tools by implementing governance controls, monitoring data exposure risks, and enforcing responsible AI usage policies.
• Promote the effective and secure use of enterprise AI assistants, including Microsoft 365 Copilot, by establishing guardrails and best practices.

What We're Looking For

• 5+ years of experience in endpoint security, workplace security, device compliance, or endpoint engineering.
• Hands-on experience with Microsoft Intune, Microsoft Defender for Endpoint, and Microsoft Purview Data Loss Prevention (DLP).
• Strong knowledge of Windows, macOS, and Linux security hardening and endpoint compliance best practices.
• Experience implementing Microsoft Entra Conditional Access and Zero Trust security controls.
• Familiarity with enterprise browser security policies and web filtering technologies.
• Understanding of AI security risks and governance within enterprise environments.
• Practical experience using enterprise AI assistants such as Microsoft 365 Copilot, with knowledge of responsible AI usage, data privacy, and security implications.
• Experience with scripting languages such as PowerShell, Bash, or Python for automation and endpoint management.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent communication skills with the ability to collaborate across technical and business teams.
• Bachelor's degree in Computer Science, Information Security, or a related discipline.

Preferred Qualifications

• Microsoft SC-200 (Security Operations Analyst)
• Microsoft SC-300 (Identity and Access Administrator)
• Microsoft MD-102 (Endpoint Administrator)
• CompTIA Security+
• CISSP, CCSP, or equivalent security certifications are advantageous.