Senior Information Security Engineer

At Globus Medical, we move with a sense of urgency to deliver innovations that improve the quality of life of patients with musculoskeletal disorders. Our team is inspired by the needs of these patients, and the surgeons and healthcare providers who treat them. We embrace a culture of exceptional response by partnering with researchers and educators to transform clinical insights into tangible solutions. Our solutions improve the techniques and outcomes of surgery so patients can resume their lives as quickly as possible.

Position Summary:

We are seeking a Senior Information Security Engineer specializing in Microsoft security, identity protection, cloud threat detection, data protection, and incident response. This position will design, implement, and operationalize security controls across Microsoft 365, Microsoft Entra, Azure, Intune, Defender, and Purview while integrating Microsoft security telemetry with the organization’s broader security ecosystem, including CrowdStrike and Rapid7.

The engineer will lead complex identity and cloud-security investigations, develop and tune detection and response capabilities, strengthen privileged-access and managed-device controls, and help prevent unauthorized access and data exfiltration from Exchange Online, SharePoint, OneDrive, Teams, and other enterprise services. The role will also establish repeatable playbooks, support post-incident remediation, mentor junior analysts, and translate technical findings into actionable operational and executive reporting.

Essential Functions:

• Design, implement, and maintain Microsoft security controls across Entra ID, Microsoft 365, Defender, Intune, and Purview, including Conditional Access, privileged access, phishing-resistant authentication, device compliance, information protection, DLP, and secure access from managed and unmanaged devices.
• Lead identity and Microsoft 365 security monitoring, investigation, and incident response, including identity compromise, suspicious authentication activity, phishing, token/session abuse, business email compromise, unauthorized cloud access, and potential data exfiltration across Exchange Online, SharePoint, OneDrive, Teams, and connected services.
• Develop and tune security detections, threat-hunting capabilities, and response workflows using Microsoft Defender XDR, KQL, Microsoft security telemetry, and integrations with platforms such as CrowdStrike and Rapid7.
• Strengthen enterprise identity security across Microsoft Entra ID, Active Directory, privileged accounts, service/workload identities, authentication methods, access reviews, and Privileged Identity Management.
• Implement and operationalize Microsoft Purview data-security capabilities, including Information Protection, sensitivity labels, DLP, Audit, eDiscovery, and Insider Risk to support data protection and security investigations.
• Develop and maintain incident-response playbooks and containment procedures, conduct post-incident reviews, preserve investigative evidence, and track remediation activities through accountable owners and target dates.
• Partner with IT, Legal, Privacy, Compliance, HR, business stakeholders, and security service providers during security investigations and remediation activities, with clearly defined internal and vendor responsibilities.
• Apply security changes through structured testing and controlled deployment, including report-only evaluation, pilot groups, exception management, validation, and rollback planning to balance security improvement with business continuity.

• Adheres to the letter and spirit of the company Code of Conduct, the AdvaMed Code, MedTech Code, and all other company policies.
• Ensures Compliance with applicable governmental laws, rules, and regulations, both in the United States and internationally, by completing introductory and annual training and maintaining knowledge of compliance as it applies to your role
• Represents the company in a professional manner and uphold the highest standards of ethical business practices and socially responsible conduct in all interactions with other employees, customers, suppliers, and other third parties

Reasonable accommodations may be made to enable individuals with disabilities to perform these essential functions.

Qualifications:

• Education: Bachelor’s Information Security, or related field.
• Microsoft Certified: Azure Security Engineer Associate, Microsoft security operations, identity, or information-protection experience demonstrated through equivalent certifications or hands-on work.
• Technical Skills:

• Advanced proficiency with SIEM, EDR, SOAR, and vulnerability management tools.
• Strong scripting skills (Python, PowerShell, Bash).
• Deep understanding of cloud security (AWS, Azure, GCP).
• Familiarity with DevSecOps and CI/CD security integration.
• Experience with zero trust architecture and identity management.

• Competencies

…