AI Security Specialist – Microsoft Copilot Backend & 3rd Level Support

This role focuses on the security architecture, threat management, and operational security of Microsoft Copilot. The role ensures secure Copilot operation across identity, access, data flows, and integrations.

What can you expect with us?

• Copilot Security Assessment: Performing regular security reviews of Copilot deployments and identifying threats such as prompt injection, model tampering, and data poisoning.

• Security Architecture & Hardening: Implementing Identity and Access Management, Conditional Access policies, and Zero Trust principles for Copilot workloads.

• Threat Modeling & Testing: Developing threat models and executing controlled security tests and red-team activities.

• Monitoring & Incident Response: Building monitoring capabilities, detecting anomalies, and responding to Copilot-related security incidents.

• Advanced Support (3rd Level): Handling complex security, performance, and usage issues related to Copilot.

• Support Enablement & Knowledge Transfer: Enabling Copilot support staff through internal documentation, guardrails, and targeted trainings; defining escalation patterns and support standards together with the support organization.

• Security Policies & Controls: Defining security controls and operational guardrails for Copilot usage.

• Plugin & Integration Security: Assessing custom Copilot plugins and third-party integrations.

• Data Flow & Encryption Validation: Analyzing Copilot data flows and validating encryption and protection mechanisms.

What do you bring to the table?

• 5+ years of experience in Cybersecurity.

• 3+ years in Microsoft 365 and Azure security.

• Strong knowledge of Microsoft Defender, Entra ID, Conditional Access, Zero Trust, and threat modeling.

• Practical experience with PowerShell, Python, or C# is required.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.

• A Master's degree in Cybersecurity, Information Security, or Applied Cryptography is a plus.

• Relevant security certifications (e.g., Microsoft Security, Azure Security, CISSP, AZ-500) are beneficial and may substitute formal education.