ABOUT THE ROLE Welltower is seeking a Microsoft 365 Security Engineer to engineer and operationalize security capabilities across email, identity, endpoint detection, and data protection. This role is a key engineering partner within Digital Workspace, helping translate workspace technology strategy into scalable, secure-by-design Microsoft 365 controls and operational standards.
The position partners closely with Digital Workspace, Security Operations, Messaging/Infrastructure, and Endpoint teams to implement secure collaboration, strengthen control effectiveness, and improve operational maturity. It is intentionally focused on Microsoft 365 security engineering rather than broader workplace technology domains such as telephony, print, digital signage, or physical security.
KEY RESPONSIBILITIESEmail Security (Primary Focus)- Engineer and optimize core Microsoft 365 email security capabilities, including Defender for Office 365, Exchange Online Protection, and anti-phishing controls.
- Design secure mail flow, enforce best practices, and implement policy-driven protections across inbound, outbound, and internal messaging.
- Develop and maintain secure configuration standards for email protection, spoofing prevention, and user-facing collaboration controls.
- Lead technical response and continuous improvement efforts for phishing, business email compromise, and related messaging threats.
Threat Protection & Detection- Engineer, tune, and support Microsoft Defender capabilities, including Defender for Endpoint and Defender for Cloud Apps, with a focus on scalable enterprise deployment.
- Partner with endpoint engineering to align device posture, compliance signals, and Defender telemetry with Conditional Access and Zero Trust objectives.
- Improve detection fidelity, reduce false positives, and strengthen operational readiness through repeatable engineering standards and control validation.
- Collaborate with Security Operations on incident response, threat hunting, and continuous improvement of endpoint and cloud threat protections.
Data Protection (Purview)- Design, implement, and manage Microsoft Purview capabilities, including Data Loss Prevention, sensitivity labeling, classification, Insider Risk, and eDiscovery.
- Translate business and compliance requirements into scalable technical controls that support governance, data handling standards, and secure collaboration.
- Develop and maintain policy-aligned protection standards for sensitive information across Microsoft 365 workloads.
- Partner with stakeholders to validate control effectiveness, support investigations, and continuously improve information protection maturity.
Identity Security- Support and help operationalize identity security controls, including Conditional Access, MFA/passwordless strategies, Privileged Identity Management, and secure access governance.
- Partner on lifecycle-oriented identity standards that improve authentication strength, reduce administrative risk, and support least-privilege access.
- Ensure engineering decisions align with Zero Trust architecture, enterprise security baselines, and broader Digital Workspace standards.
Operational Excellence & Collaboration- Contribute to operational metrics, service improvements, and platform maturity initiatives across Microsoft 365 security services.
- Document engineering standards, technical decisions, implementation guidance, and supportable operational procedures.
- Partner across Digital Workspace, Security, Infrastructure, and service providers to improve reliability, policy enforcement, and control effectiveness.
- Support continuous improvement through automation, standardization, and repeatable engineering practices.
OTHER DUTIESPlease note this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of this employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.
TRAVELMinimal travel is to be expected.
MINIMUM REQUIREMENTS- 5-7+ years of experience in Microsoft 365 security engineering within a complex enterprise environment.
- Deep expertise in Microsoft Defender, Exchange Online security and mail flow, Microsoft Purview, and core identity security controls.
- Experience implementing enterprise security baselines, secure configuration standards, and policy-driven controls at scale.
- Strong understanding of incident response workflows, control validation, and operational governance across Microsoft 365 platforms.
- Ability to translate security and compliance requirements into practical engineering solutions in partnership with security, infrastructure, and workplace technology teams.
WHAT WE OFFER - Competitive Base Salary + Annual Bonus
- Generous Paid Time Off and Holidays
- Employee Stock Purchase Program - purchase shares at a 15% discount
- Employer-matching 401(k) Program + Profit Sharing Program
- Student Debt Program - we'll contribute up to $10,000 towards your student loans!
- Tuition Assistance Program
- Comprehensive and progressive Medical/Dental/Vision options
- Professional Growth
- And much more! https://welltower.com/newsroom/careers/
