Senior Cybersecurity Analyst

Job Title: Sr Cybersecurity CMMC Expert

Location: Tampa, FL On Site

Job Type: Full-Time

Salary: $120K-$145K

Job Summary:

We are seeking a highly skilled and motivated a Microsoft 365 Cloud Security & Compliance Manager to join our growing IT and cybersecurity team. This individual will be responsible for implementing, managing, and monitoring Microsoft 365 and Azure security solutions, with a strong focus on compliance frameworks such as NIST 800-171 and CMMC Level 2. The ideal candidate has 6+ years of hands-on experience in M365 cloud security, endpoint protection, and compliance in a defense contractor or similarly regulated environment.

Key Responsibilities:

Security Operations & Architecture

• Manage the administration and optimization of Microsoft 365 Defender, Microsoft Defender for Endpoint, Defender for Identity, and Defender for Office 365
• Configure and manage Microsoft Intune for secure endpoint management, application protection policies, and device compliance
• Develop and manage Microsoft Sentinel workbooks, analytics rules, and playbooks for security incident response and automation
• Implement Azure AD Conditional Access, MFA policies, role-based access control (RBAC), and Identity Protection

Cloud Security & Governance

• Manage and audit Azure Security Center, Microsoft Purview, Compliance Manager, and M365 Security Center
• Lead and conduct regular security baselines, risk assessments, and vulnerability scans
• Create and maintain policies for data loss prevention (DLP), information protection, and compliance reporting
• Experience in Azure networking include creating VMs, AVD, NSG.

Compliance & Framework Alignment

• Support internal/external audits and assessments related to NIST 800-171, CMMC, and DFARS
• Maintain compliance evidence repositories and remediation documentation
• Assist in SSP, POA&M, and security control implementation documentation

Collaboration & Incident Response

• Work with IT, DevOps, and Compliance teams to support secure deployment practices
• Investigate security incidents and assist in root cause analysis and response
• Develop SOPs, runbooks, and training materials for internal security awareness

Qualifications:

Required:

• 6+ years of hands-on experience with Microsoft 365 and Azure security tools
• Deep understanding of Microsoft Intune, Defender XDR, Azure AD, and Microsoft Sentinel
• Familiarity with Microsoft Purview, Compliance Manager, and M365 DLP
• Knowledge of NIST SP 800-171 and CMMC Level 2 requirements
• Experience with regulatory/compliance documentation (SSP, POA&M)
• Excellent troubleshooting and analytical skills
• Bachelor s degree in Cybersecurity, Information Technology, or related field

Preferred:

• Microsoft certifications such as:
• SC-300 (Identity and Access Administrator)
• SC-200 (Security Operations Analyst)
• MS-500 (Security Administrator)
• AZ-500 (Azure Security Engineer)
• Experience with GCC High cloud environments

EOE/ADA

IND123