M365 Security and Compliance Analyst (Job 1455)
Secures and maintains compliance of a large Microsoft 365 tenant for a federal government contractor: monitoring security threats, running security impact analyses, authorizing third-party cloud apps, and advising on NIST/FedRAMP alignment. Requires 5+ years securing M365, federal security framework experience, relevant certifications, and ability to obtain a Public Trust clearance.
- Compensation
- $125K–$135K / yr
- Location
- Bethesda, Maryland
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Legal
- Posted
Skills
Must have
- Bachelor's degree in Information Technology, Cybersecurity, or related field
- Minimum 5 years managing and securing the M365 cloud tenant (Teams, SharePoint, OneDrive, Copilot)
- Experience conducting Security Impact Analyses and authorization requests for third-party apps integrated within M365
- Experience contributing to governance and best practices for securing cloud data and advising customers on secure software selection
- Experience with Federal security guidelines, standards, and control frameworks (e.g., NIST SP 800-53)
- Experience conducting analyses of alternatives (AoAs) for secure software substitutions (e.g., lacking FedRAMP compliance)
- Experience identifying and implementing compensating controls for mission-critical software
- Strong knowledge of security standards and best practices
- Excellent problem-solving and analytical skills
- Strong cross-team collaboration and coordination with 3rd parties
- Relevant certifications (e.g., Microsoft 365 Security Administrator Associate, CompTIA Security+, CISSP)
- Must be able to obtain a Public Trust clearance
Nice to have
- Cloud Security experience (AWS, Azure, GCP) within a large FedRAMP-certified government environment
Full description
About Us
DLH delivers improved health and national security readiness solutions for federal programs through science, research and development, systems engineering and integration, and digital transformation. Our experts in public health, performance evaluation, and health operations solve the complex problems faced by civilian and military customers alike by leveraging advanced tools – including digital transformation, artificial intelligence, data analytics, cloud enablement, modeling, and simulation, and more. DLH is dedicated to the idea that “Your Mission is Our Passion” and brings a unique combination of government sector experience, proven methodology, and unwavering commitment to innovation to improve the lives of millions.
Overview
DLH is seeking an experienced M365 Security and Compliance Analyst to join our team. The M365 Security Analyst is responsible for securing and maintaining compliance of the Microsoft 365 (M365) ecosystem. The ideal candidate will have prior experience supporting large enterprise (>20,000 assets) installations with the Federal government.
Responsibilities
- Monitor and analyze security threats within the Microsoft 365 environment to maintain and enhance compliance and security posture.
- Ensure compliance with security standards and regulations.
- Handle complex issues related to securing and monitoring the M365 cloud tenant.
- Provide technical guidance and support to the ISSO team and M365 community.
- Coordinate with other IT teams to integrate and authorize new cloud enterprise software requests.
- Ensure cross-training and knowledge sharing within the team.
Qualifications
- Bachelor’s degree in information technology, Cybersecurity, or a related field
- Minimum of five (5) years of experience in managing and securing the Microsoft 365 (M365) cloud tenant (including Teams, SharePoint, OneDrive, Copilot)
- Prior experience conducting Security Impact Analyses and requests for authorization of third-party applications and services integrated within the M365 cloud tenant
- Prior experience contributing to governance and best practices related to securing data in the cloud and advising customers on selecting appropriate secure software.
- Prior experience working with Federal security guidelines, standards, and control frameworks (such as NIST SP 800-53)
- Prior experience conducting analyses of alternatives (AoAs) to identify secure software substitutions for insecure vendor products (i.e., lacking FedRAMP compliance)
- Prior experience identifying and implementing compensating controls for mission-critical software