Microsoft 365 Security Analyst / Consultant

The Role

We are looking for a Microsoft 365 Security Analyst / Consultant to join our growing cyber security team.

We are deliberately keeping the level of the role flexible and are interested in speaking with people operating at Analyst through Consultant level who have a strong background in Microsoft 365 security, cyber security operations or related disciplines.

The successful candidate will help our clients assess, improve and maintain the security of their Microsoft 365 environments, while also supporting the delivery of PulseState, Enso's Cyber Assurance service.

PulseState brings together offensive and defensive security capabilities to help organisations continuously understand whether their security controls are working effectively in practice.

This role will form part of the defensive / Blue Team function, working alongside our offensive security capability to interpret findings, investigate potential weaknesses, assess risk and help clients prioritise remediation.

What You'll Be Doing

Your responsibilities are likely to include:

• Conducting security assessments and audits of Microsoft 365 environments.
• Reviewing Microsoft 365 configurations against recognised security standards and CIS Benchmarks.
• Assessing Microsoft Entra ID configuration, identity security and privileged access.
• Reviewing and designing Conditional Access and MFA controls.
• Assessing Microsoft Intune configuration, device compliance and endpoint security.
• Reviewing Microsoft Defender XDR, Defender for Endpoint and Defender for Office 365 configuration and alerts.
• Reviewing Microsoft Purview security, information protection and compliance controls.
• Assessing Exchange Online, SharePoint, OneDrive and Teams security configurations.
• Reviewing enterprise applications, application registrations and third-party access.
• Helping clients understand Microsoft Secure Score while going beyond compliance scoring to assess actual security risk.
• Supporting vulnerability management and remediation prioritisation.
• Producing clear technical findings and actionable remediation recommendations.
• Working with clients to validate remediation and improve their overall security posture.
• Supporting PulseState Cyber Assurance engagements and interpreting findings produced through continuous security validation and offensive security testing.
• Working alongside our offensive security team to understand attack paths, control weaknesses, and business risk.
• Providing third-line security support and assisting with incident investigation where required.
• Supporting the investigation of suspicious activity across Microsoft 365, identity and endpoint environments.
• Contributing to client reports, security reviews and executive-level security discussions.

What We're Looking For

We would ideally like to hear from candidates with 3+ years of relevant industry experience, although practical capability is more important to us than a specific number of years.

You should have experience in several of the following areas:

• Microsoft 365 security.
• Microsoft Entra ID / Azure AD.
• Conditional Access and identity security.
• Microsoft Intune.
• Microsoft Defender XDR.
• Defender for Endpoint and/or Defender for Office 365.
• Microsoft Purview.
• Microsoft Sentinel or another SIEM platform.
• Vulnerability management.
• Security incident investigation.
• Threat analysis or Blue Team security operations.
• CIS Benchmarks and secure configuration assessment.
• Cyber security risk assessment and remediation.

A background working as a cyber security analyst, SOC analyst, security engineer or security consultant would be particularly advantageous.

Experience with regulated businesses, financial services or compliance frameworks such as ISO 27001, NIST, Cyber Essentials, PCI DSS or similar would also be useful.

Certifications

Relevant Microsoft, cyber security or industry certifications would be advantageous, but they are not essential.

We are equally interested in candidates who can demonstrate strong practical experience and a proven track record in security.

Relevant certifications might include Microsoft Security certifications, CompTIA Security+/CySA+, CISSP, CISM, Cyber Essentials or similar.

The Person

Because we operate as a close-knit specialist team, we are looking for someone who is comfortable taking ownership and working directly with clients.

You should be able to take a technical security issue, understand its real-world risk, and explain it clearly to both technical and non-technical stakeholders.

We value curiosity, sound technical judgement and a willingness to challenge assumptions rather than simply following checklists.

You do not need to know every technology we use from day one. We are more interested in finding someone with strong security fundamentals, the right mindset, and the ability to develop with the role.

Why Join Enso?

You'll have the opportunity to:

• Work with a broad range of Channel Islands and international organisations.
• Gain exposure to complex, globally distributed client environments.
• Work across Microsoft cloud security, cyber assurance, vulnerability management, and security operations.
• Work closely with both offensive and defensive security specialists.
• Help develop and deliver Enso's growing PulseState Cyber Assurance service.
• Work directly with senior client stakeholders and Enso's leadership team.
• Develop your technical and consulting skills within a growing, experienced cyber security team.

#J-18808-Ljbffr