[Hiring] Security Engineer @BCD

Role Description

The Security Engineer (Identity & Access) sits within the global ICT / MWT Security Services function and provides dedicated engineering ownership for identity, access and mobile access protection controls across BCD Travel’s Microsoft security ecosystem. The role designs, implements, tunes and continuously improves Conditional Access, Identity Protection, MFA, Defender for Cloud Apps, Microsoft Purview Information Protection and MDM/MAM security controls. The objective is to move identity security from distributed and reactive support to proactive, measurable and continuously governed protection of the primary enterprise attack surface.

As a Security Engineer, Modern Workplace Technology – Security Services, you will:

• Design, enforce, review, and optimize CA policies across user, device, application, location, risk and session contexts
• Engineer, tune, and govern policies and anomaly detections to improve signal quality, visibility and enterprise security monitoring
• Monitor and operationalize risk-based controls for scenarios such as impossible travel, high-risk users and risky sign-ins
• Own MFA strategy and enforcement, including rollout and improvement of phishing-resistant authentication methods
• Integrate identity and access controls across Entra, Defender and Purview to ensure consistent security outcomes
• Continuously assess policy coverage, exclusions, break-glass considerations, trusted network/device assumptions and session controls
• Review risky users, risky sign-ins, impossible travel and other identity risk signals to identify required tuning, remediation or escalation
• Tune Defender for Cloud Apps policies and anomaly detections to improve high-quality signals for monitoring and response
• Own operational tickets, policy changes, security reviews, and escalations related to identity, access, MFA and mobile access controls within agreed priorities
• Coordinate with MWT Security Services engineers, endpoint management, SOC/security operations, audit and compliance stakeholders

Qualifications

• Strong hands-on experience with Microsoft Entra ID, Conditional Access, MFA and Identity Protection
• Practical experience engineering and maintaining Microsoft Defender for Cloud Apps policies and anomaly detections
• Understanding of Microsoft Purview Information Protection and data classification concepts
• Experience with Android and iOS MDM/MAM security controls, preferably with Microsoft Intune
• Ability to translate risk, audit, and compliance requirements into enforceable technical controls
• Strong documentation, communication, troubleshooting, and stakeholder-management skills
• Ability to Interpret and Follow Written IT Policies and Procedures
• Knowledge of security monitoring, incident response handoffs, and evidence collection practices
• Excellent verbal and written communication skills in English
• Ability to travel domestically and internationally as needed

Benefits

• Flexible working hours and work-from-home or remote opportunities
• Opportunities to grow your skillset and career
• Generous vacation days so you can rest and recharge
• A compensation package that feels fair to you, including mental, physical, and financial wellbeing tools
• Travel industry professional perks and discounts
• An inclusive work environment where diversity is celebrated

Company Description

BCD Travel helps companies travel smart and achieve more. We drive program adoption, cost savings and talent retention through digital experiences that simplify business travel. Our 15,000+ dedicated team members service clients in 170+ countries as we shape a sustainable future for business travel. BCD’s leading meetings and events management and global consultancy services complete our comprehensive suite of solutions for all aspects of corporate travel. In 2024, BCD achieved US$22.9 billion in sales.

Get to know us by reading our blog and checking out our social media:

• Blog
• LinkedIn
• Instagram
• Facebook