Microsoft 365 Security Specialist

Microsoft 365 Security Specialist – Strengthen Our Cybersecurity Framework

We are seeking a highly skilled Microsoft 365 Security Specialist to elevate our cybersecurity defenses, safeguard our hybrid and cloud infrastructure, and ensure the integrity of our digital ecosystem. In this pivotal role, you will lead the administration, optimization, and security hardening of our core Microsoft 365 environment—including Microsoft Entra ID, Microsoft Intune, email security, and endpoint protection—while driving proactive threat mitigation and incident response strategies. This position is ideal for a security professional who thrives at the intersection of technology, compliance, and risk management, with a passion for safeguarding sensitive data in a dynamic digital landscape.

As our Microsoft 365 Security Specialist, you will play a critical role in fortifying our security posture by implementing cutting-edge solutions and best practices. Your expertise will be instrumental in mitigating risks, ensuring regulatory compliance, and fostering a culture of security awareness across the organization. This is more than a job—it’s an opportunity to shape the future of our security infrastructure while contributing to a collaborative and innovative team.

Key Responsibilities

Your role will encompass a broad spectrum of security responsibilities, ensuring end-to-end protection of our digital assets. Key duties include:

• Identity & Access Management (IAM): Design and enforce a Zero Trust security framework by implementing robust identity governance policies. Leverage advanced tools like Microsoft Entra ID to manage access controls, multi-factor authentication (MFA), conditional access policies, and role-based access control (RBAC). Ensure that authentication and authorization mechanisms align with industry-leading security standards while balancing usability and compliance.
• Endpoint & Device Security: Deploy and manage unified endpoint security solutions, including Microsoft Intune, Mobile Device Management (MDM), and Mobile Application Management (MAM), to secure devices across platforms. Implement Endpoint Detection and Response (EDR) solutions, deployment baselines, and security configurations to mitigate vulnerabilities and prevent unauthorized access. Ensure all endpoints adhere to stringent security policies while maintaining operational efficiency.
• Email & Threat Protection: Oversee and maintain comprehensive email security controls to combat evolving threats such as phishing, spoofing, and malware. Configure and monitor SPF, DKIM, and DMARC protocols to enhance email authentication and reduce the risk of compromise. Collaborate with stakeholders to develop and enforce security policies that protect against sophisticated email-based attacks.
• Security Operations & Incident Response: Act as the primary point of contact for security alerts, conducting thorough threat analysis to identify and neutralize potential risks. Develop and refine incident response plans, ensuring rapid and effective mitigation of security breaches. Continuously assess and improve our security posture by identifying vulnerabilities, applying security patches, and enhancing hardening baselines.
• Security Awareness & Compliance: Partner with leadership and teams to enforce security policies, vulnerability management practices, and compliance requirements. Drive the adoption of security best practices through training, awareness campaigns, and proactive risk assessments. Ensure alignment with regulatory standards and internal security frameworks to minimize compliance risks and enhance organizational resilience.

This role demands a blend of technical expertise, strategic thinking, and a proactive approach to security challenges. If you are passionate about safeguarding digital environments and eager to make a meaningful impact in a fast-paced, tech-driven organization, we invite you to join our team as our next Microsoft 365 Security Specialist.

Qualifications

The ideal candidate will possess a robust combination of technical skills, certifications, and experience in the following areas:

• Proven expertise in Microsoft 365 security solutions, including Microsoft Entra ID, Intune, Azure AD, and Microsoft Defender for Endpoint, with a deep understanding of their configurations, integrations, and security implications.
• Hands-on experience implementing Zero Trust principles, including identity governance, MFA, conditional access policies, and RBAC, to enhance security while maintaining operational workflows.
• Proficient in endpoint security, with knowledge of MDM/MAM solutions, EDR tools, and deployment baselines to secure devices across Windows, macOS, and mobile platforms.
• Strong background in email security, with practical experience managing protocols like SPF, DKIM, and DMARC, as well as mitigating phishing, spoofing, and other email-based threats.
• Experience in security operations and incident response, including monitoring security alerts, conducting threat analysis, and leading incident response efforts to minimize downtime and damage.
• Familiarity with security compliance frameworks, such as ISO 27001, NIST, or GDPR, and the ability to translate regulatory requirements into actionable security policies.
• Certifications such as Microsoft Certified: Security, Compliance, and Identity Specialist, Certified Information Systems Security Professional (CISSP), or equivalent are highly preferred.
• Excellent communication and collaboration skills, with the ability to translate complex security concepts into clear, actionable guidance for non-technical stakeholders.

Join us in building a resilient security framework that protects our most valuable assets while driving innovation and growth. Your expertise will be instrumental in shaping a secure digital future for our organization.