Description

You will secure migration efforts and validate security tooling for the Secure Horizons Program and Data Loss Prevention projects. You will reduce internal workload by augmenting security operations and enabling the team to focus on architecture and governance.

Responsibilities

• Implement and validate CIS baseline configurations (L1 minimum) for endpoints, identities, and cloud services, including Entra ID, Intune, and Microsoft 365.
• Manage vulnerability triage, validate agent deployment coverage, and track remediation progress while identifying gaps in scanning.
• Configure and tune Microsoft Defender for Endpoint, Defender for Cloud Apps, and Defender for Identity, including Advanced Hunting queries and ARC installation.
• Validate log ingestion into Microsoft Sentinel or SIEM, ensure telemetry coverage across endpoints and cloud applications, and tune alerts to reduce false positives.
• Support Okta MFA, Access Reviews, and Mobile Device MAM/MDM, while validating security posture during migration waves.

Required Skills

• 8+ years of experience in security operations or SOC environments.
• Hands-on expertise with Microsoft Defender suite (Endpoint, Cloud Apps, Identity), Microsoft Sentinel, Intune, and Entra ID.
• Experience with vulnerability management tools such as Tenable and configuration validation.
• Knowledge of identity providers, specifically Okta, and Mobile Device Management (MAM/MDM).
• Familiarity with Data Loss Prevention (DLP) strategies, including AI workloads, Purview, and Varonis.
• Understanding of CSPM/AI modules and related Sentinel alerting.
• Ability to create documentation and training materials in SCORM 2.0 format.
• Knowledge of NIST SP 800-171 and CMMC compliance frameworks.

Preferred Skills

• SC-200 or CISSP certification.

Key Skills

Education

Bachelor's degree