Abrar Admin

creo

<div>JOB DESCRIPTION OVERVIEW 
CREO Consultants lead and deliver complex, security-focused engagements across Microsoft cloud and endpoint ecosystems. You will serve as a trusted advisor to client executives and technical teams, owning outcomes from scoping and solution design through execution, reporting, and remediation guidance. This role is ideal for a hands-on practitioner who can both architect and build, with strength in Identity &amp; Access Management (IAM), Microsoft Azure/M365 security, and automation using PowerShell. Consultants work autonomously, mentor analysts, and contribute to proposals, statements of work (SOWs), and reusable delivery accelerators. 
 
POSITION RESPONSIBILITIES<ul><li>
Vulnerability &amp; Framework Assessment Responsibilities</li></ul><ul><li>
Schedule, run, and interpret vulnerability scans using tools like Tenable or Qualys</li><li>
Track and report on remediation progress in collaboration with client IT teams</li><li>
Assist with readiness assessments for SOC 2, ISO 27001, and NIST CSF</li><li>
Map client controls to framework requirements and identify gaps</li><li>
Client Leadership &amp; Delivery</li></ul><ul><li>
Own end-to-end delivery for security engagements (e.g., M365 hardening, Sentinel deployments, MDR onboarding, external/internal assessments).</li><li>
Translate business risk into technical requirements; create architectures, roadmaps, and prioritized remediation plans.</li><li>
Facilitate client workshops, runbooks, and executive readouts; produce clear, actionable deliverables and presentations.</li><li>
Coordinate cross-functional teams; track scope, risks, issues, and dependencies; ensure on-time, on-budget delivery.</li><li>
Identity &amp; Access Management</li></ul><ul><li>
Design and implement secure identity architectures in Microsoft Entra ID (Azure AD), including tenant configuration baselines.</li><li>
Engineer Conditional Access policies, MFA, passwordless, risk-based access (Identity Protection), and step-up authentication.</li><li>
Establish role-based access control (RBAC), Privileged Identity Management (PIM), Just-In-Time (JIT) access, and access reviews.</li><li>
Build joiner/mover/leaver lifecycle processes; integrate HRIS/IDaaS; govern external/guest access and B2B collaboration.</li><li>
Harden identities for hybrid environments (Entra Connect/Cloud Sync), legacy protocols, service principals, and workload identities.</li><li>
Microsoft Cloud Security (Azure &amp; M365)</li></ul><ul><li>
Deploy and tune Microsoft Sentinel (data connectors, analytics rules, UEBA, workbooks, automation rules, hunting queries).</li><li>
Implement Defender for Cloud and Microsoft 365 Defender (Endpoint, Identity, Office 365, Cloud Apps) with secure configurations.</li><li>
Design secure landing zones (network segmentation, Private Link, Key Vault, managed identities, logging/monitoring).</li><li>
Apply Zero Trust principles across identity, device, network, apps, and data; document security baselines and exceptions.</li><li>
Integrate third-party controls (e.g., CrowdStrike) with Microsoft security for holistic detection and response.</li><li>
Engineering &amp; Automation (Powershell/Devops)</li></ul><ul><li>
Develop robust PowerShell tooling and modules to automate Entra ID, Exchange Online, Defender, Intune, and Graph API workflows.</li><li>
Create automation runbooks (e.g., Azure Automation, Functions) for repetitive administrative and incident response tasks.</li><li>
Use KQL for analytics and threat hunting; build reusable dashboards and reports.</li><li>
Follow secure coding standards, version control (Git), and CI/CD practices for infrastructure-as-code where applicable.</li><li>
Detection, Response &amp; Vulnerability Management</li></ul><ul><li>
Triage and investigate alerts; lead incident response playbooks, root-cause analysis, and containment/remediation guidance.</li><li>
Correlate telemetry across Sentinel, Microsoft 365 Defender, and endpoint tools; develop custom detections and enrichments.</li><li>
Coordinate vulnerability scanning/validation and remediation with client teams; communicate risk and business impact.</li><li>
Prepare client-ready IT deliverables.</li></ul><ul><li>
Help design visually compelling and insightful IT presentations and reports, translating complex technical data into clear, actionable insights for clients
</li><li>Your deliverables will include detailed technical documentation, spreadsheets, IT models, PowerPoint decks, and status reports, all designed to communicate intricate information in an accessible and professional manner
</li><li>Collate data from vulnerability scans and penetration tests to create client deliverables 
</li></ul><ul><li>
Collect data for analysis of business problems.
<ul><li>Assist in gathering, organizing, and analyzing data to address business challenges from an IT perspective</li><li>
Work with clients to understand their technical requirements, conducting research, and synthesizing information to inform technology-related recommendations</li><li>
Build Excel models to analyze IT-related data, such as system performance metrics, cost reduction, network optimization, and user engagement</li><li>
Conduct vendor interviews, create IT-related surveys, and develop reports that provide valuable insights for client decision-making 
</li></ul></li><li>
Record information and disperse it to those who need it</li></ul><ul><li>
Play a critical role in recording and summarizing technical discussions during internal and client meetings</li><li>
Help capture essential IT-related details, ensuring that all important information is documented accurately and distributed to relevant stakeholders</li><li>
Effective communication, both written and verbal, will be key in keeping the project team aligned, ensuring technical solutions are clearly communicated, and tracking action items and project progress</li><li>
Governance, Risk &amp; Compliance (GRC)</li></ul><ul><li>
Map controls to frameworks (NIST CSF/800-53, ISO 27001, SOC 2); document policies/standards and exceptions.</li><li>
Support audit readiness and evidence collection; drive continuous improvement with measurable KPIs.</li><li>
Knowledge Sharing &amp; Practice Development</li></ul><ul><li>
Mentor analysts; perform peer reviews; contribute playbooks, templates, and accelerators.</li><li>
Assist pre-sales with scoping, level-of-effort, and solution narratives; participate in client demos and POCs.</li><li>
Maintain high level of billable time</li><li>
Annual billable utilization target: 1,700 hours
</li></ul>REQUIRED QUALIFICATIONS, SKILLS, AND EXPERIENCE<ul><li>
6+ years in cybersecurity with significant client-facing consulting experience.</li><li>
Deep Microsoft 365 administration and security configuration experience.</li><li>
Advanced PowerShell scripting (module development, Graph API, REST), automation runbooks, and CLI tooling.</li><li>
Hands-on IAM engineering: Conditional Access, MFA/passwordless, PIM/JIT, RBAC, access reviews, lifecycle (joiner/mover/leaver).</li><li>
Azure and Microsoft security engineering: Sentinel, Defender for Cloud, Microsoft 365 Defender, secure landing zones, logging/monitoring.</li><li>
Strong analytical and communication skills; ability to translate technical risk for executives and practitioners.</li><li>
Bachelor&rsquo;s degree in a relevant field or equivalent experience.</li><li>
This role is open to remote candidates; however, preference will be given to those located in Durham, NC.</li></ul>
CERTIFICATIONS (Required or within 6 months)<ul><li>
Microsoft Certified: Identity and Access Administrator Associate (SC-300).</li><li>
Microsoft Certified: Azure Security Engineer Associate (AZ-500).</li><li>
Strongly preferred: Cybersecurity Architect Expert (SC-100); Security Operations Analyst Associate (SC-200).</li></ul>
ADDITIONAL DESIRED, BUT NOT REQUIRED<ul><li>
Experience integrating CrowdStrike Falcon with Microsoft security tools.</li><li>
Experience with Infrastructure-as-Code (Bicep/Terraform) and policy (Azure Policy, Defender for Cloud).</li><li>
Scripting beyond PowerShell (e.g., Python) for data analysis and automation.</li><li>
Experience with data protection and compliance controls (DLP, Purview).</li></ul>
Please note: This application may be reviewed in part by automated systems to help identify qualified candidates.
RYZT7xi6cS</div>

Consultant, Cybersecurity

Join creo and explore 1   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

creo

About Company

Consultant, Cybersecurity