M365 Security Consultant (App sec/SCA/SAST/DAST , CI/CD Security, DevSecOps )

Avanade; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Avanade in the United Kingdom seeks an M365 Consultant/Senior Consultant to help transform clients' cybersecurity posture by designing and implementing Microsoft Threat Protection technologies across endpoints, identities, cloud, and collaboration platforms.

The role involves working directly with clients in a consulting capacity, supporting medium to large enterprise environments and contributing to robust Cyber Defence strategies across the Microsoft stack, including Defender for Endpoint,

Qualifications

• Experience with Microsoft Sentinel architecture and deployments.
• Ability to design analytics rules, workbooks, and playbooks.
• Strong understanding of cyber defence concepts and SOC operations.
• Experience in client-facing consulting and agile environments.

Responsibilities

• Design and implement AV/EDR solutions to detect and respond to threats across major operating systems.
• Protect email, messaging, and collaboration platforms from phishing and identity-related attacks.
• Develop and maintain cyber defence use cases, correlation rules, and detections.
• Design, implement, and integrate SIEM solutions—especially Microsoft Sentinel—into Security Operations.
• Perform threat hunting across endpoints, identities, cloud, and collaboration platforms.
• Support incident response, triage, threat modelling, and remediation in Azure-hosted environments.
• Create and troubleshoot Logic Apps, playbooks, and Sentinel automation components.
• Collaborate with stakeholders to define and improve security standards.

Skills

Microsoft Defender for Endpoint

Microsoft Sentinel

Azure Logic Apps

KQL

Threat hunting

Incident response

Client facing

Azure

Tools

Microsoft Defender for Endpoint

Microsoft Defender for Cloud

Microsoft 365 Defender

Azure Security Center

Job description

As an M365 Consultant/Senior Consultant, you will help transform clients' cybersecurity posture by designing and implementing advanced Microsoft Threat Protection technologies. You will work directly with clients in a consulting capacity, supporting medium to large enterprise environments and contributing to robust Cyber Defence strategies across endpoints, identities, cloud, and collaboration platforms.

Key Responsibilities

• Design and implement AV/EDR solutions (e.g., Microsoft Defender for Endpoint) to detect and respond to cyber threats across major operating systems.
• Protect email, messaging, and collaboration platforms from phishing, spear phishing, BEC, and identity-related attacks.
• Develop and maintain cyber defence use cases, correlation rules, and attack chain detections across disparate systems.
• Design, implement, and integrate SIEM solutions-particularly Microsoft Sentinel-into Security Operations.
• Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem.
• Handle L2-level incidents leveraging Microsoft Sentinel and Microsoft Defender tools.
• Support incident response, triage, threat modelling, and vulnerability remediation within Azure-hosted environments.
• Create, run, and troubleshoot Azure Logic Apps, playbooks, and Sentinel automation components.
• Collaborate with business and security stakeholders to define and enhance security standards and improve security posture.

• Technical Expertise: Proven experience with Microsoft Sentinel (architecture, deployment, analytics rules, workbooks, playbooks); Microsoft Defender for Endpoint and Defender for Cloud; SIEM/SOC operations; Azure Logic Apps; vulnerability remediation; incident response.
• Threat Hunting & Detection: Hands-on experience using KQL, Microsoft Defender XDR, and threat intelligence sources to hunt threats and support investigations.
• Cyber Defence & Infrastructure Security: Strong understanding of cyber defence concepts, infrastructure security, and troubleshooting across the Microsoft ecosystem.
• Methodology: Familiarity with agile methodologies and backlog management.
• Collaboration & Communication: Strong communication skills, ability to work with cross-functional teams, and experience in client-facing environments.
• Technologies: Knowledge of Microsoft 365, Azure, Windows, Linux, and mobile operating systems.
• SC100 or equivalent desirable

Characteristics for Success

• Consultative and collaborative mindset; strong relationship builder.
• Resilient, adaptable, intellectually curious.
• Passionate about Microsoft security technologies (M365 Threat Protection, Defender suite, O365, Identity).
• Problem-solver, quality-driven, self-motivated, and innovative.