M365 Security and Compliance Analyst (Job 1455)

The role

The M365 Security Analyst is responsible for securing and maintaining compliance of the Microsoft 365 ecosystem. This role involves monitoring security threats and providing technical guidance to the ISSO team and M365 community.

What you will do

• Monitor and analyze security threats within the Microsoft 365 environment.
• Ensure compliance with security standards and regulations.
• Handle complex issues related to securing and monitoring the M365 cloud tenant.
• Provide technical guidance and support to the ISSO team and M365 community.
• Coordinate with other IT teams to integrate and authorize new cloud enterprise software requests.
• Ensure cross-training and knowledge sharing within the team.

Required qualifications

• Bachelor’s degree in information technology, Cybersecurity, or a related field
• Minimum of five (5) years of experience in managing and securing the Microsoft 365 (M365) cloud tenant (including Teams, SharePoint, OneDrive, Copilot)
• Prior experience conducting Security Impact Analyses and requests for authorization of third-party applications and services integrated within the M365 cloud tenant
• Prior experience contributing to governance and best practices related to securing data in the cloud and advising customers on selecting appropriate secure software
• Prior experience working with Federal security guidelines, standards, and control frameworks (such as NIST SP 800-53)
• Prior experience conducting analyses of alternatives (AoAs) to identify secure software substitutions for insecure vendor products (i.e., lacking FedRAMP compliance)
• Prior experience identifying and implementing compensating controls for mission-critical software
• Strong knowledge of security standards and best practices
• Excellent problem-solving and analytical skills
• Strong cross-team collaboration and coordination with 3rd parties is required
• Relevant certifications (e.g., Microsoft 365 Security Administrator Associate, CompTIA Security+, CISSP) required

Nice to have

• Prior experience with Cloud Security (AWS, Azure, GCP) within a large government environment (FedRAMP certified) preferred

Benefits

• Personal Time Off (PTO)
• medical
• dental
• vision
• supplemental life with AD&D
• disability coverage
• flexible spending accounts
• 401(k) Retirement Plan with a matching component
• training
• access to e-learning suite
• professional and technical certification preparation
• education assistance at accredited institutions

Before you apply

• Must be able to obtain a Public Trust clearance

About the company

DLH delivers improved health and national security readiness solutions for federal programs through science, research and development, systems engineering and integration, and digital transformation.