Security Consultant – Microsoft Purview

• Permanent contract.
• Hybrid work modality from Barcelona.
• Participation in a leading international project in the field of data security and protection.
• Professional stability and career development.
• Continuous training and access to market-leading technologies.
• Collaborative and multicultural environment.
• Excellent working environment oriented towards innovation and continuous improvement.

• Minimum of 3 years of experience in cybersecurity, security monitoring, or technological risk management.
• Experience working with Microsoft Purview.
• Knowledge of Insider Risk Management (IRM).
• Experience in:
• Alert Triage.
• Signal Engineering.
• Log analysis.
• Alert management.
• Preparation of operational documentation.
• Ability to work under SLA.
• Experience in operational reporting and incident monitoring.
• High level of English.

• Experience in Microsoft Security & Compliance.
• Knowledge of Data Governance and Data Protection.
• Experience in false positive reduction and security policy optimization.
• Experience in dashboard and indicator design.
• Knowledge of Power BI or similar visualization tools.
• Experience in international projects.

At Métrica Consulting, we are looking for a Security Consultant specialized in Microsoft Purview and Insider Risk Management (IRM) to join an international information security and protection project.

The position will focus on the operational management, analysis, and optimization of Insider Risk Management alerts within the Microsoft Purview ecosystem. We are looking for professionals with experience in alert triage, signal analysis, continuous improvement of detection policies, and security operations management.

• Review and analysis of IRM alerts in Microsoft Purview.
• Application of documented triage and classification procedures.
• Creation and documentation of cases requiring additional analysis.
• Maintenance of operational alert documentation.
• Monitoring the impact of changes in detection policies and rules.
• Compliance with established SLAs for alert management and review.
• Management of day-to-day operational incidents.
• Monitoring of compliance with SLAs related to alerts.
• Coordination and monitoring of L1 operational activity.
• Communication of policy and procedure updates.
• Preparation of periodic reports on alert volume, trends, and incidents.
• Coordination of actions during Microsoft Purview incidents or interruptions.
• Review and adjustment of Insider Risk Management configurations.
• Refinement of indicators and reduction of false positives.
• Design and implementation of new policies and use cases.
• Configuration of triggers and connectors.
• Support for specific cases by country, market, or data type.
• Analysis of logs and events.
• Design of operational and executive dashboards.
• Identification of improvement opportunities in monitoring processes and internal risk management.

Residency in Barcelona or availability to work in a hybrid modality will be especially valued.

• Microsoft Purview
• Insider Risk Management (IRM)
• Security Operations
• Alert Triage
• Signal Engineering
• Log Analysis
• Compliance
• Data
• Protección de Datos
• Reporting & Dashboards