Cyber Security Lead with MICROSOFT SECURITY STACK

 

CYBERSECURITY LEAD – MICROSOFT SECURITY STACK

 

Microsoft Security Stack  ·  Client Portfolio Management  ·  10+ Years Experience

Employment Type: Full-time

Experience: 10+ Years

Work Model: Houston, TX - Hybrid / Remote

Domain: Consulting / MSSP

Certification: SC-100 / MS-500

 

We are looking for a seasoned Cybersecurity Lead to own and grow a portfolio of enterprise client security engagements built on the Microsoft security platform. You will serve as the senior security advisor across clients, translating business risk into architecture decisions, governing security operations, and leading a team of security engineers and analysts. This is a high-visibility role that spans strategy, architecture, delivery, and client relationship management.

 

Own end-to-end security posture across a portfolio of enterprise clients, acting as primary escalation point and trusted advisor

10+ years of progressive cybersecurity experience, with at least 5 years in a client-facing consulting or managed security services role

Architect and deliver Microsoft-native security solutions spanning identity, endpoint, cloud, SIEM, and compliance domains

Deep hands-on expertise with Microsoft Sentinel (KQL, analytics rules, SOAR playbooks) and Defender XDR suite

Lead threat detection, incident response, and vulnerability management programs using Sentinel, Defender XDR, and Entra ID

Strong command of Microsoft Entra ID, Conditional Access, PIM, Identity Governance, and Lifecycle Workflows

Drive security assessments, risk reporting, and roadmap planning aligned to client business objectives and regulatory requirements

Experience securing Microsoft 365 environments: Defender for Office 365, Purview, DLP, and Compliance Manager

Mentor and manage a team of security engineers; run QBRs and executive briefings with client stakeholders

Proficiency with Microsoft Intune for endpoint management and security policy enforcement

Define and enforce secure architecture standards, IAM governance frameworks, and Zero Trust adoption plans

Demonstrated experience managing multiple client accounts with accountability for SLAs and outcomes

Collaborate with sales and pre-sales on security proposals, SOW scoping, and capability demonstrations

Strong executive communication skills; ability to translate technical risk to business language

Stay current on emerging threats, Microsoft product releases, and frameworks (NIST, CIS, ISO 27001)

 

Relevant certifications: SC-100, SC-200, SC-300, AZ-500, MS-500 (one or more required)

 

Defender & SIEM

Microsoft Sentinel

Defender XDR

Defender for Endpoint

Defender for Cloud

Defender for Identity

Defender for Office 365

 

Microsoft Entra ID

Entra PIM

Identity Governance

Conditional Access

Lifecycle Workflows

Entra Agent ID

 

Microsoft Purview

Microsoft Intune

Security Copilot

M365 E5 Security

Microsoft Defender for Cloud Apps

Azure Policy

 

Azure Security Center

KQL

Logic Apps / SOAR

MS Graph API

Lighthouse (Multi-tenant)

PowerShell / Azure CLI

 

Microsoft MVP in Security or demonstrated community leadership and contributions

Experience with Security Copilot agent development or AI-assisted security operations

Familiarity with post-quantum cryptography, Zero Trust Network Access (ZTNA), and SASE frameworks

Prior experience with tenant-to-tenant migrations or large-scale M365 consolidations

Knowledge of CrowdStrike, F5, Palo Alto and integration patterns with the Microsoft stack

Background in regulated industries: healthcare, financial services, energy, or government