Microsoft 365 Security Professional

Cloud Security Services; United States; Remote; USD 100,000 - 150,000; Full time

Job summary

A leading company within the cybersecurity field seeks a Microsoft365 Security Consultant to enhance their client's security posture. This remote role, lasting 6 months, involves securing services, implementing compliance standards, and acting as a liaison with service providers. The ideal candidate should possess strong knowledge of Microsoft Azure and Office 365, alongside relevant certifications. A Bachelor's degree in Computer Science is required along with project management skills.

Qualifications

• In-depth knowledge and experience with MS Azure and M365 compliance.
• Ability to establish effective professional relationships throughout the organization.
• Experience managing multiple vendor and service provider relationships.

Responsibilities

• Secure enterprise information by implementing appropriate security controls.
• Act as a technical liaison for external security service providers.
• Document processes and create a 2-year Azure Security program roadmap.

Skills

Microsoft Azure

Office 365

Project Management

Communication

Cybersecurity

Education

Bachelor's degree in Computer Science

Tools

PowerShell

Terraform

Ansible

Windows Security

Linux Security

SIEM

Job description

Cloud Security Services is currently looking for an experienced Microsoft365 security consultant for our client. Our client requires an experienced consultant with experience in Micsrosoft365 security with excellent project management and communications skills to support the continuous enhancements of their security posture on the Microsoft365 paltform. This is a 6-month remote project that may require some onsite travel.

Responsibilities:

The Microsoft365 Security Consultant secures Company enterprise information, provides leadership in developing and applying security controls, and in reporting upon control effectiveness through integrated metrics.

The person in this role will be a subject matter expert providing technical security expertise, guidance, and implementation assistance to multiple internal teams. The person will also act as a technical liaison for external security service providers. The role provides opportunities to evaluate, plan, test, implement, and maintain security systems and controls; and to create and enforce security standards and procedures as they related to the Microsoft365 platform.

Primary

• Assist projects securely implementing services and migrating data to Microsoft Office 365, and Azure.
• Secure services following best practices such as CIS benchmarks, NIST CSF, and Microsoft CAF (Cloud Adoption Framework).
• Document status and decisions made during the processes.
• Define program scope and problem statements
• Document current state for process and technologies currently being deployed to address security posture on the Azure platform.
• Develop future state Azure Security framework
• Document roles and responsibilities
• Develop roadmap and business case including funding estimates
• Facilitate obtaining stakeholder consensus
• Validate current controls and IT risk management
• Create 2-year Azure Security program roadmap

Required Skills:

The role requires in-depth knowledge and experience with MS Azure and O365, specifically in configuring and ensuring initial and ongoing compliance with multiple suites of security benchmarks as per Industry standards

• Experience with Microsoft Azure AD, MS Azure technologies (e.g., Azure Resource Manager) and architecture; Office 365 product suite.
• Knowledge of and experience implementing services based on industry standard security and control frameworks, e.g., CIS (Center for Internet Security); NIST CSF, 800-53; Azure Security Benchmarks (ASB).
• One or more Microsoft Azure certifications, e.g., AZ-900, AZ-500, SC-300, SC-400, SC-900
• In-depth understanding of and extensive experience with Windows, Linux, Windows security (NTFS), Active Directory, Linux security, TCP/IP, common networking services (e.g., DNS, DHCP, DFS, PKI),
• Experience with any of PowerShell, Terraform, bash, Ansible.
• Experience with any of the following: CyberArk, Tenable, f5 APM, Kibana, Macintosh Operating Systems (MacOS), iptables.
• Knowledge of CI/CD and DevSecOps tools

Candidate should have prior experience installing, configuring, monitoring, and administering several of the following: firewall policies, IDS, IPS, SIEMs, password vaulting systems, patch management systems, vulnerability scanners, web application firewalls, certificate management systems, key management systems, security detection and response, networking diagnostic/monitoring tools, and/or other security appliances and services

Ability to establish effective professional business relationships throughout the organization

Experience successfully managing multiple vendor and service provider relationships

Preferred Skills:

• Cybersecurity certifications such as CISSP, CISM, vendor certifications, etc.
• 1 - 3 years overall experience in Public Key Infrastructure (PKI), Digital Certificates (user and device based), Secure Shell (SSH), Transport Layer Security (TLS), Hardware Security Modules (HSM), Key Management Lifecycle (Generation, Deployment and Revocation), Information / Digital Rights Management, Transparent Database Encryption (TDE), Storage and Messaging Encryption
• 2 - 3 years overall experience in IT infrastructure and networking administration
• 2 - 3 years overall experience in network and platform security

Required Education:

• Bachelor's degree or equivalent experience in Computer Science

EEO Statement:

Cloud Security Services is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, marital status, national origin, genetics, disability, age, or veteran status.