Remote Security Architect

Summary

The job description is for a Microsoft Threat Protection Security Architect role at Cyclotron. The position involves architecting, designing, and executing enterprise deployments of various Microsoft security solutions. The ideal candidate should have demonstrated knowledge and skill with Microsoft cloud security solutions, strong communication skills, and experience in leading technical discussions.

Requirements

• Demonstrated knowledge and skill with Microsoft cloud security solutions such as Microsoft Defender for Office 365, Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Cloud Apps, Microsoft Defender for Cloud, and Sentinel
• Strong and demonstrated experience with KQL queries, Attack Simulation services, on-premises Microsoft security solutions including Windows 10 and 11, Windows Server and Active Directory as well as third party solutions used to protect hosts
• Strong communication skills, experience in leading technical discussions, providing guidance and direction when resolving technical challenges along with demonstrated technical writing experience

Responsibilities

• Architect, design, and execute enterprise deployments of Microsoft Defender XDR and Microsoft Sentinel
• Work with Cyclotron clients to design and deploy industry-leading solutions to improve the protection of Microsoft-based assets within their on-premises and cloud environments
• Collaborate with customer teams to drive discovery, design, configuration, validation, piloting, deployment, and support of Microsoft cloud and on-premises security capabilities
• Contribute to the development of new Threat Protection and SIEM services offered by Cyclotron
• Engage with other Cyclotron and customer teams to get and share information to improve processes and security posture

Preferred Qualifications

• History with competitive security tools (Crowdstrike, Cortex, Webroot, Soti, XenMobile, Workspace ONE, Okta, PingFederate, etc.)
• Experience with Microsoft Intune, Configuration Manager, Entra ID, Entra ID Connect, SSO and Microsoft Purview capabilities
• Experience with data connectors, data sources, and Logic Apps
• Experience with migration of third party email security applications (Proofpoint, Mimecast, Cisco Secure Email, Tessian and Ironscales)
• Currently holds a Microsoft 365 Certified Security Administrator Associate or Azure Security Engineer Associated certification
• Currently holds a Certified Information Systems Security Professional (CISSP) and/or Certified Information Security Manager (CISM)
• Security Operations (SecOps) experience with Microsoft Defender XDR