Position Responsibilities:

• Design, implement, and maintain enterprise cybersecurity solutions across Microsoft technologies.
• Engineer security controls required for CMMC Level 2/3 and NIST SP 800-171 compliance.
• Develop and maintain Microsoft Sentinel analytics, workbooks, automation rules, and incident response playbooks.
• Deploy and manage Microsoft Defender XDR technologies including Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud Apps, Microsoft Defender for Cloud
• Design and administer Microsoft Intune and endpoint security policies.
• Implement Conditional Access, Identity Protection, and Zero Trust security architectures using Microsoft Entra ID.
• Build security automation using Logic Apps, Power Automate, KQL, PowerShell, and Microsoft Graph.
• Develop advanced KQL queries for threat hunting, compliance reporting, and security monitoring.
• Partner with Infrastructure teams to harden Windows Server, Windows 11, Azure, and Microsoft 365 environments.
• Support vulnerability management and remediation coordination using tools such as Microsoft Defender Vulnerability Management, Tanium, or similar platforms.
• Participate in security architecture reviews and provide engineering guidance on new technologies.
• Support incident response activities during security investigations.
• Produce technical documentation, standards, and implementation guides.

Basic Qualifications:

• Bachelor’s degree in computer science, cyber security, or related STEM field; or equivalent combination of education and experience
• Active DoD secret clearance or higher
• Minimum 8 – 12 years' experience in enterprise security engineering, with at least 3 years in a senior technical role
• Advanced knowledge of security frameworks and compliance standards (NIST, CMMC, DFARS, ITAR)
• Proven track record of leading large-scale security initiatives and architectural decisions
• Expert knowledge of Windows, Linux, and MacOS operating systems and enterprise networking concepts
• Experience leading incident response for critical security events
• Strong technical writing skills for documentation and policy development
• Strong scripting experience using PowerShell.
• Advanced Kusto Query Language (KQL) experience.
• Experience implementing security baselines and hardening standards.
• Excellent troubleshooting and analytical skills.
• Strong written and verbal communication abilities.