Senior Security Engineer

<div class="content-intro"><p><span style="font-weight: 400;">At Morgan &amp; Morgan, the work we do matters. For millions of Americans, we’re their last line of defense against insurance companies, large corporations or defective goods. From attorneys in all 50 states, to client support staff, creative marketing to operations teams, every member of our firm has a key role to play in the winning fight for consumer rights. Our over 6,000 employees are all united by one mission: For the People.</span></p></div><p><span style="text-decoration: underline; font-size: 14pt;"><em><strong>Senior Security Engineer&nbsp;</strong></em></span></p> <p><span style="text-decoration: underline;"><em><strong>Location: </strong></em></span>Orlando, FL or Tampa, FL (Onsite, Full-Time)</p> <p><span style="text-decoration: underline;"><em><strong>Work Arrangement</strong></em></span><strong>:</strong> This is an in-office position, open to local candidates only.</p> <h2>About the Role</h2> <p>Our firm is a large, multi-state law practice with a sophisticated technology environment and a deep responsibility to protect highly sensitive client and matter data. We are seeking a Senior Security Engineer to strengthen and mature our Microsoft-centered security program. This is a hands-on engineering role for someone who thrives on threat detection, tenant hardening, identity modernization, and security automation—and who can clearly communicate risk and remediation to both technical teams and firm leadership.</p> <h2>Key Responsibilities</h2> <h3>Detection and Response</h3> <ul> <li>Engineer, tune, and operate detections and response workflows across Microsoft Defender XDR and Microsoft Sentinel, including authoring and optimizing KQL queries, analytics rules, workbooks, and hunting content.</li> </ul> <h3>Tenant and Endpoint Hardening</h3> <ul> <li>Lead and execute M365 tenant hardening initiatives across the E5 stack, establishing and maintaining secure baselines and configuration standards.</li> <li>Administer and harden endpoint security through Microsoft Defender for Endpoint and Intune, including device compliance, configuration profiles, and attack surface reduction.</li> </ul> <h3>Security Automation and Vulnerability Management</h3> <ul> <li>Build and maintain security automation (e.g., Logic Apps, automation rules/playbooks, PowerShell, Azure Functions) to reduce manual effort and accelerate response.</li> <li>Own vulnerability assessment and remediation tracking, partnering with IT and infrastructure teams to close gaps.</li> </ul> <h3>Cloud, Ide