Job description

Core Responsibilities Required Qualifications Own end-to-end security posture across a portfolio of enterprise clients, acting as primary escalation point and trusted advisor 10+ years of progressive cybersecurity experience, with at least 5 years in a client-facing consulting or managed security services role Architect and deliver Microsoft-native security solutions spanning identity, endpoint, cloud, SIEM, and compliance domains Deep hands-on expertise with Microsoft Sentinel (KQL, analytics rules, SOAR playbooks) and Defender XDR suite Lead threat detection, incident response, and vulnerability management programs using Sentinel, Defender XDR, and Entra ID Strong command of Microsoft Entra ID, Conditional Access, PIM, Identity Governance, and Lifecycle Workflows Drive security assessments, risk reporting, and roadmap planning aligned to client business objectives and regulatory requirements Experience securing Microsoft 365 environments: Defender for Office 365, Purview, DLP, and Compliance Manager Mentor and manage a team of security engineers; run QBRs and executive briefings with client stakeholders Proficiency with Microsoft Intune for endpoint management and security policy enforcement Define and enforce secure architecture standards, IAM governance frameworks, and Zero Trust adoption plans Demonstrated experience managing multiple client accounts with accountability for SLAs and outcomes Collaborate with sales and pre-sales on security proposals, SOW scoping, and capability demonstrations Strong executive communication skills; ability to translate technical risk to business language Stay current on emerging threats, Microsoft product releases, and frameworks (NIST, CIS, ISO 27001) Relevant certifications: SC-100, SC-200, SC-300, AZ-500, MS-500 (one or more required) Microsoft Technology Scope Defender & SIEM Microsoft Sentinel Defender XDR Defender for Endpoint Defender for Cloud Defender for Identity Defender for Office 365 Identity & Access Management Microsoft Entra ID Entra PIM Identity Governance Conditional Access Lifecycle Workflows Entra Agent ID Compliance, Productivity & AI Microsoft Purview Microsoft Intune Security Copilot M365 E5 Security Microsoft Defender for Cloud Apps Azure Policy Supporting Stack & Skills Azure Security Center KQL Logic Apps / SOAR MS Graph API Lighthouse (Multi-tenant) PowerShell / Azure CLI Preferred Qualifications Preferred Qualifications Microsoft MVP in Security or demonstrated community leadership and contributions Experience with Security Copilot agent development or AI-assisted security operations Familiarity with post-quantum cryptography, Zero Trust Network Access (ZTNA), and SASE frameworks Prior experience with tenant-to-tenant migrations or large-scale M365 consolidations Knowledge of CrowdStrike, F5, Palo Alto and integration patterns with the Microsoft stack Background in regulated industries: healthcare, financial services, energy, or government

Requirements

Must-haves

Own end-to-end security posture across a portfolio of enterprise clients, acting as primary escalation point and trusted advisor
10+ years of progressive cybersecurity experience, with at least 5 years in a client-facing consulting or managed security services role
Architect and deliver Microsoft-native security solutions spanning identity, endpoint, cloud, SIEM, and compliance domains
Deep hands-on expertise with Microsoft Sentinel (KQL, analytics rules, SOAR playbooks) and Defender XDR suite
Lead threat detection, incident response, and vulnerability management programs using Sentinel, Defender XDR, and Entra ID
Strong command of Microsoft Entra ID, Conditional Access, PIM, Identity Governance, and Lifecycle Workflows
Drive security assessments, risk reporting, and roadmap planning aligned to client business objectives and regulatory requirements
Experience securing Microsoft 365 environments: Defender for Office 365, Purview, DLP, and Compliance Manager
Mentor and manage a team of security engineers; run QBRs and executive briefings with client stakeholders
Proficiency with Microsoft Intune for endpoint management and security policy enforcement
Define and enforce secure architecture standards, IAM governance frameworks, and Zero Trust adoption plans
Demonstrated experience managing multiple client accounts with accountability for SLAs and outcomes
Collaborate with sales and pre-sales on security proposals, SOW scoping, and capability demonstrations
Strong executive communication skills; ability to translate technical risk to business language
Stay current on emerging threats, Microsoft product releases, and frameworks (NIST, CIS, ISO 27001)
Relevant certifications: SC-100, SC-200, SC-300, AZ-500, MS-500 (one or more required)
Microsoft Technology Scope
Defender & SIEM

Nice-to-haves

Microsoft MVP in Security or demonstrated community leadership and contributions
Experience with Security Copilot agent development or AI-assisted security operations
Familiarity with post-quantum cryptography, Zero Trust Network Access (ZTNA), and SASE frameworks
Prior experience with tenant-to-tenant migrations or large-scale M365 consolidations
Knowledge of CrowdStrike, F5, Palo Alto and integration patterns with the Microsoft stack
Background in regulated industries: healthcare, financial services, energy, or government

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiazureapi

Platform: careers-browser
Effort: medium

Benefits

Benefits detected in the listing.

Pto