What You'll Do:
-Investigate, validate, prioritize, and remediate vulnerabilities across endpoints, servers, cloud services, and applications.
-Produce clear, risk-based summaries of security assessment results and contribute to actionable reporting.
-Assist in selecting and applying appropriate information security controls in coordination with system engineers, architects, and other technical stakeholders.
-Support incident handling and response, digital forensics, threat detection, and vulnerability management processes.
-Use SIEM, SOAR, EDR, cloud services, and Microsoft enterprise technologies including O365, Azure, Defender, and Entra.
-Contribute to security planning, assessments, risk analysis, risk management, certification, and awareness activities for systems and networks.
-Analyze security issues and help develop effective remediation strategies.
-Communicate security concepts, risks, and recommendations to technical and non-technical audiences.
-Assist with vulnerability remediation and coordinate with teams to ensure timely resolution.
-Help optimize the Microsoft Defender suite, including Defender for Endpoint, Defender for Cloud, Defender for Identity, and Defender for Office 365.
-Assist with Microsoft Purview capabilities, including data classification, sensitivity labels, Data Loss Prevention, and eDiscovery workflows.
-Write and tune Kusto Query Language (KQL) queries in Microsoft Sentinel, Defender, and Log Analytics to aid detection and investigation.
-Contribute to the review and improvement of security controls using findings from assessments and red or blue team engagements.
-Help develop clear guidance and documentation for security controls, compliance requirements, and governance in the Microsoft cloud environment.
What You've Done:
-Ability to attain DHS EOD.
-BA and 10 years of experience, or AA and 12 years of experience(per contract requirements).
-Active Security+ CE certification.
-Demonstrated experience regarding Conditional Access Policies (CAPs), Azure AD/Entra, and Zero Trust principles.
-Experience in one or more of the following areas: incident response, digital forensics, vulnerability management, identity and access management, threat detection, or security engineering.
-Exposure to cybersecurity assessments such as vulnerability assessments, threat assessments, application security, or infrastructure security.
-Familiarity with Cyber and NIST policy, Risk Management Framework, and the implementation of security mitigations.
-Strong analytical and problem-solving skills with a focus on optimizing security workflows.
-Professional, customer-oriented, and calm under pressure.
-Effective written and verbal communication skills across stakeholder levels.
