USI-FY26-Cyber-Cyber Operate-Detect & Respond-LSA-M365

Cyber

Deloitte Cyber understands the unique challenges and opportunities businesses face in cybersecurity. As a leader in the field, we empower our clients to transform their security posture and navigate the ever-evolving threat landscape. Join our team to drive impactful change, deliver strategic insights, and help organizations.

Position Summary

Level: Solution Delivery Lead

Work you’ll do:

As a Microsoft 365 Senior Security Consultant, you will be at the front lines with our clients supporting them with their Cyber needs specifically helping them navigate the journey on securing their Microsoft 365 (M365) platform. This will include:Act as a senior advisor and technical lead for Microsoft security solutions—including Purview, Intune, Sentinel, Security Copilot, Entra ID, SCCM, and the full Defender suite (Defender for Office, Endpoints, Servers, Vulnerabilities, Cloud Apps, XDR)—guiding clients on secure implementation strategies and best practices.

• Lead transformation initiatives for clients transitioning from third-party security tools to the Microsoft security stack, ensuring seamless migration, integration, and optimization of security controls and processes.
• Deliver expert security assessments and technical health checks for Microsoft 365 environments, analyzing configurations, controls, and operational practices. Advise on remediation actions in alignment with leading industry standards (NIST, CIS, CISA, PCI DSS) and Deloitte’s Microsoft 365 Cyber Risk Framework.
• Lead and support proof-of-concept and production deployments of Microsoft cloud security technologies, ensuring robust protection and compliance.
• Advise clients through transitions to Microsoft 365 security services, overseeing solution setup, service configuration, and risk mitigation—including hands-on experience with MFA, Conditional Access, Purview Compliance Manager, Information Protection (MPIP), and Data Loss Prevention (DLP).
• Develop, configure, and deliver comprehensive cloud security and compliance reports, translating technical findings into actionable recommendations for stakeholders.
• Provide advanced troubleshooting and technical support for Microsoft security services, collaborating with Microsoft to resolve complex issues in multi-vendor, multi-protocol environments.
• Implement and advocate for industry-leading cyber risk management practices, including policy development, incident response, data protection, and access control within Microsoft 365 environments.
• Manage the full lifecycle of Microsoft 365 security engagements—from discovery and assessment through design, deployment, testing, hypercare/handover—ensuring high-quality outcomes.
• Maintain thorough documentation of technical issues, analyses, client communications, and resolutions as part of ongoing cyber risk mitigation.
• Provide internal technical training and contribute to thought leadership, including Point-of-Views (PoVs) on M365 security challenges and emerging best practices.
• Maintain a strong understanding of Microsoft licensing models (E3, E5, EMS E3, EMS E5) to ensure security solutions align with client entitlements and maximize value.

The Team

Enterprise Security teams embed security in all aspects of digital transformation by securing a client’s “technical backbone” while also enabling secure digital transformation. Services include security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products. Examples of work include Secure by Design, Cloud Security Orchestration & Automation, Core Infrastructure Security, and Secure Software Enablement. Deloitte Cyber team helps complex organizations more confidently pursue their growth, innovation and performance agendas through proactive management of the associated cyber risks. Our professionals provide advisory and implementation services that integrate risk, regulatory, and technology skills to help clients transform their legacy programs into proactive Secure.Vigilant.Resilient.TM cyber programs. Cloud Infrastructure supports organizations through the complete cycle of migrating business processes to the cloud, with capabilities and solutions focused on development, transformation, and resilience of cloud security.

Must-Have Skills & Experience

• 5+ years of experience in technical consulting, client problem solving, architecting, and designing solutions in a consulting role.
• 5+ years of hands-on technical experience implementing and operating Microsoft 365 enterprise-level messaging, collaboration, and security services which includes:
• Entra ID (Azure AD), Multi-Factor Authentication (MFA), Conditional Access, Microsoft Purview, Defender for Office 365, Exchange Online protection, Defender for Endpoints/Servers, Intune, SCCM, MEM, Microsoft Sentinel, Defender for Cloud, Defender for Identify, Defender for Vulnerability Management, Defender for XDR, Security Copilot, Teams, SharePoint Online, OneDrive for Business, Defender for Cloud Apps and Power Platform.
• Work on technical response for security incidents impacting M365 core services, including Teams, Entra ID, OneDrive, SharePoint Online, Intune, and Defender suite.
• Experience diagnosing service disruptions, security breaches, access failures (e.g., widespread MFA outages), and policy misconfigurations.

Good-to-Have Skills & Certifications

• Microsoft certifications (SC-900, SC-100, SC-200, SC-300, SC-400)
• Cybersecurity certifications (CCSP, CCSK, CISSP, CCNP, CCNA)

Education

• Btech/BA/BS/Mtech/MS degree preferred, ideally in Computer Science, Cyber Security, Information Security, Engineering, or Information Technology.

Location