Cybersecurity Senior Analyst

CREO•Durham, NC

2d•Remote

About The Position

The Cybersecurity Senior Analyst supports the delivery of cybersecurity consulting services, with a primary focus on Microsoft security technologies (Microsoft 365, Azure, Microsoft Defender, and Microsoft Sentinel). This role is hands-on in client environments and works closely with consulting leads who manage most client communications. The Senior Analyst executes assigned technical tasks, performs analysis, and produces high-quality documentation and deliverables that consultants use in client presentations and recommendations. This position is ideal for someone who is comfortable operating independently on defined workstreams (e.g., vulnerability management, security monitoring support, identity reviews, configuration assessments) while still collaborating closely with senior consultants/architects for direction and quality assurance.

Requirements

3-5 years in cybersecurity.
Microsoft 365 administration and security configuration experience.
Experience with PowerShell scripting (module development, Graph API, REST), automation runbooks, and CLI tooling.
Hands-on IAM engineering: Conditional Access, MFA/passwordless, PIM/JIT, RBAC, access reviews, and user lifecycle (joiner/mover/leaver).
Azure and Microsoft security engineering: Sentinel, Defender for Cloud, Microsoft 365 Defender, secure landing zones, logging/monitoring.
Strong analytical and communication skills.
Bachelor’s degree in a relevant field or equivalent experience.
Microsoft Certified: Identity and Access Administrator Associate (SC-300).
Microsoft Certified: Azure Security Engineer Associate (AZ-500).

Nice To Haves

Strongly preferred: Cybersecurity Architect Expert (SC-100); Security Operations Analyst Associate (SC-200); CompTIA Security+.
Experience integrating CrowdStrike Falcon with Microsoft security tools.
Experience with Infrastructure-as-Code (Bicep/Terraform) and policy (Azure Policy, Defender for Cloud).
Scripting beyond PowerShell (e.g., Python) for data analysis and automation.
Experience with data protection and compliance controls (DLP, Purview).