Description

You will secure migration efforts and validate security tooling for the Secure Horizons Program and Data Loss Prevention projects.

This role is remote.

Responsibilities

• Implement and validate CIS baseline configurations (L1 minimum) for endpoints, identities, and cloud services including Entra ID, Intune, and Microsoft 365.
• Configure and tune Microsoft Defender for Endpoint, Defender for Cloud Apps, and Defender for Identity, including Advanced Hunting queries and ARC installation.
• Validate log ingestion into Microsoft Sentinel or SIEM, ensure telemetry coverage, and tune alerts to reduce false positives.
• Manage vulnerability triage, validate agent deployment coverage, and track remediation progress while identifying scanning gaps.
• Support Okta MFA, Access Reviews, and Mobile Device MAM/MDM while validating security posture during migration waves.

Required Skills

• 8+ years of experience in security operations or SOC environments.
• Hands-on expertise with Microsoft Defender suite (Endpoint, Cloud Apps, Identity), Microsoft Sentinel, Intune, and Entra ID.
• Experience with vulnerability management tools such as Tenable and configuration validation.
• Knowledge of identity providers, specifically Okta, and Mobile Device Management (MAM/MDM).
• Familiarity with Data Loss Prevention (DLP) strategies, including AI workloads, Purview, and Varonis.
• Understanding of CSPM/AI modules and related Sentinel alerting.
• Ability to create documentation and training materials in SCORM 2.0 format.
• Knowledge of NIST SP 800-171 and CMMC compliance frameworks.

Preferred Skills

• SC-200 or CISSP certification.

Key Skills

Education

Bachelor's degree