L2 Specialist – Microsoft Purview DLP & Defender

We are seeking a senior Microsoft Security Specialist with deep expertise in Microsoft Purview DLP and Microsoft Defender XDR to act as the L2 escalation point for complex security incidents.Key ResponsibilitiesHandle escalated Microsoft DLP/Defender incidents.Lead investigations into data-loss events.Investigate malware and compromised-account indicators.Perform root-cause analysis of complex security incidents.Design and tune Microsoft Purview DLP policies.Optimise Defender detection and alert rules.Perform advanced hunting using KQL.Support insider-risk investigations.Coordinate complex cases with Microsoft/OEM support.Maintain ownership of escalated tickets through closure.Support security reporting and optimisation recommendations.Requirements5+ years relevant security experience preferred.Strong hands-on expertise with:Microsoft Purview DLPMicrosoft Defender for EndpointDefender for Cloud AppsDefender for Office 365Defender XDRSC-200 and/or SC-400 certification, or equivalent demonstrable expertise.SC-300/AZ-500 is an advantage.KQL/Advanced Hunting capability preferred.Strong security incident investigation and RCA skills.Must be available to work onsite in Abu Dhabi.