Defender XDR/Endpoint Security Engineer

Defender XDR/Endpoint Security Engineer

Focus Infotech

Job Overview

Location

Abu Dhabi, United Arab Emirates

Employment Type Full-time

Work Arrangement On-site

Sector Information Technology & Software

Experience Level Senior (5-8 years)

Application Deadline November 13, 2026

About the Company

Focus Infotech is a technology solutions provider based in Abu Dhabi, UAE. The company specializes in delivering advanced IT services and solutions to businesses, aiming to enhance their operational efficiency and digital capabilities. Focus Infotech is dedicated to leveraging technology to drive innovation and support the growth of its clients in the region.

Job Description Focus Infotech is seeking an experienced Security Engineer for their Abu Dhabi office. This role involves establishing and operating approved Defender XDR/Endpoint policies, connectors, and security configurations. You will validate logging, analytics, alert tuning, and incident workflows, coordinating Sentinel/SIEM with the existing SOC. The position also includes configuring Purview sensitivity labels, classification, information protection, and DLP, as well as coordinating Zscaler secure-access/DLP policies.

Required Skills

• Defender XDR Endpoint Security SIEM Sentinel Purview DLP Zscaler Entra ID Incident Response Phishing Triage

Key Responsibilities

• Establish and operate approved Defender XDR/Endpoint policies, connectors, and security configurations.
• Validate logging, analytics, alert tuning, and incident workflows, coordinating Sentinel/SIEM with the existing SOC.
• Configure Purview sensitivity labels, classification, information protection, and DLP, enforcing pilots only after approval.
• Coordinate Zscaler secure-access/DLP policies with cloud and network owners.
• Validate post-migration security baselines, endpoint controls, and posture, identifying deviations for remediation.
• Coordinate Entra security controls and access reviews with identity owners, preserving authorized access and segregation of duties.
• Triage phishing, endpoint alerts, and security events, securely collecting evidence and recording actions.
• Coordinate approved containment, escalation, and SOC handover under existing contracts and playbooks.
• Maintain security-exception, risk, and remediation trackers with accountable owners.

Qualifications

• 8+ Years of experience.
• Proficiency in Arabic AND/OR European languages is a strong advantage.
• Experience establishing and operating approved Defender XDR/Endpoint policies, connectors, and security configurations.
• Experience validating logging, analytics, alert tuning, and incident workflows.
• Experience coordinating Sentinel/SIEM with the existing SOC.
• Experience configuring Purview sensitivity labels, classification, information protection, and DLP.
• Experience coordinating Zscaler secure-access/DLP policies with cloud and network owners.
• Experience validating post-migration security baselines, endpoint controls, and posture.
• Experience coordinating Entra security controls and access reviews with identity owners.
• Experience triaging phishing, endpoint alerts, and security events.
• Experience coordinating approved containment, escalation, and SOC handover.
• Experience maintaining security-exception, risk, and remediation trackers.