Microsoft 365 Security & Compliance Specialist
About The Position
The Microsoft 365 Security & Compliance Specialist administers Microsoft 365 GCC G5 security, compliance, identity, and data protection controls. This position is contingent upon contract award. The role configures and maintains Microsoft Purview, Defender, and Entra ID security controls; monitors alerts and investigates security events; supports incident response and remediation; coordinates secure collaboration with the SharePoint administrator; and maintains technical documentation, user guidance, KPI reports, and evidence for risk reviews and authorization packages. The specialist also provides qualified backup support across cybersecurity functions and assists with transition and knowledge transfer.
Requirements
- Bachelor’s degree.
- At least 6 years of relevant cybersecurity experience, including at least 5 years administering Microsoft 365 E5/G5 security and compliance workloads.
- U.S. citizenship.
- Favorable Tier 2 Public Trust adjudication required before performance.
- Security+ certification required.
- Experience or knowledge involving M365 E5/G5 security, federal cloud policies, FISMA, FedRAMP, and Zero Trust.
Nice To Haves
- Cybersecurity Architect Expert, Security Operations Analyst, or M365 Security Administrator certification.
- GCC/G5 operational experience.
Responsibilities
- Configure, administer, and tune Microsoft Purview data loss prevention policies and rules; investigate sensitive data exposure alerts and document corrective actions.
- Manage Defender for Endpoint and Defender for Cloud Apps policies, investigate detections, and coordinate endpoint and cloud remediation.
- Administer Entra ID security controls, identity protection, and cloud security policies; support privileged access oversight and approved access changes.
- Monitor Microsoft 365 security and compliance alerts and configurations, adjusting controls to reflect threat information and agency requirements.
- Maintain secure cloud collaboration and coordinate site permissions, data protection, and user impacts with the SharePoint administrator.
- Support incident investigation and containment with the Cybersecurity Operations Lead, preserving technical evidence and recording policy changes.
- Document configurations, procedures, and user guidance; provide monthly data protection KPI reports and evidence for risk reviews and authorization packages.
- Provide qualified backup support across cybersecurity functions and support transition and knowledge transfer.
Benefits
- Eligible full-time employees receive medical, dental, vision, life, and disability coverage.
- Retirement savings with company match.
- Paid time off.
- Voluntary supplemental benefits.
- Access to an employee assistance program.
- Educational assistance with tuition reimbursement.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
