About Netrio

Role Overview

We are seeking a highly skilled Microsoft Security Engineer to join our team. This role is a dedicated resource for one of our large healthcare clients, responsible for implementing, managing, and optimizing Microsoft security solutions as to protect sensitive ePHI data and ensuring compliance with regulatory standards such as HIPAA. The ideal candidate will have deep expertise in Microsoft’s security ecosystem, strong analytical skills for threat detection and response, and experience collaborating with IT teams to maintain a secure environment.

Key Responsibilities

Security Operations & Monitoring

·      Perform alert triage, prioritize remediation actions, and escalate incidents as needed.

·      Coordinate with internal IT teams for incident response and threat containment.

·      Generate periodic security reports and compliance summaries for leadership.

Microsoft Security Suite Management

·      Deploy, configure, and maintain the entire Microsoft Defender Suite (Defender for Endpoint, Office 365, Identity, Cloud Apps, etc.).

·      Manage Microsoft Sentinel for SIEM operations, including rule tuning, playbook automation, and threat hunting.

·      Administer Microsoft Entra for identity and access management.

·      Oversee Microsoft Purview for data governance and compliance.

·      Manage Microsoft Intune for endpoint security and compliance enforcement.

Compliance & Regulatory Requirements

·      Ensure adherence to HIPAA regulations and proper handling of ePHI (electronic Protected Health Information).

·      Maintain documentation and evidence for audits and compliance checks.

Continuous Improvement

·      Stay current with emerging threats, Microsoft security updates, and best practices.

·      Recommend and implement security enhancements to strengthen posture.

Required Certifications

·      Microsoft Certified: Cybersecurity Architect Expert (SC-100)

·      Microsoft Certified: Security Operations Analyst Associate (SC-200)

·      Microsoft Certified: Identity and Access Administrator Associate (SC-300)

·      Microsoft Certified: Information Protection Administrator Associate (SC-400)

Required Skills & Experience

·      Proven experience with the Microsoft Defender Suite, Microsoft Sentinel, Microsoft Entra, Microsoft Purview, and Microsoft Intune.

·      Strong understanding of HIPAA compliance and handling of ePHI.

·      Hands-on experience with alert triage, incident response, and security reporting.

·      Ability to collaborate effectively with cross-functional IT teams.

·      Excellent problem-solving and communication skills.

Preferred Qualifications

·      Experience with automation using PowerShell or Logic Apps.

·      Familiarity with Zero Trust architecture principles.

·      Knowledge of regulatory frameworks beyond HIPAA (e.g., NIST CSF, CIS v8.1, ISO 27001).

This position requires 24/7 on-call availability and occasional travel.

Salary Range: $75,000 - $95,000 annually.

This position is mandatory for candidates to be based in the United States.