{"@context":"https://schema.org","@type":"JobPosting","title":"Senior Microsoft 365 Security Analyst","description":"
\nOur client is an Austin-based managed IT services and cybersecurity company and a trusted Microsoft partner. They deliver modern workplace, security, and cloud solutions to a diverse portfolio of clients across industries. Their team operates as an extension of their customers’ IT organizations, providing expert guidance, hands-on management, and proactive support across their Microsoft environments.
\n
\nAs they continue to grow, they are looking for a cybersecurity-focused Microsoft 365 Security Analyst with deep expertise in Microsoft Sentinel, Microsoft Purview, and the full Microsoft Defender suite to join their team in the Austin, Texas area.
\n
\nWhat YOU get to DO at this award-winning company:
\nThis is primarily a security operations and compliance analyst position — the ideal candidate will help design and manage SIEM solutions in Azure Sentinel, build out information protection frameworks with Purview, and be heavily involved in threat detection and incident response across multiple customer environments.\n

Endpoint & Device Management\n\t
- Help configure and manage Intune for Windows, macOS, iOS, and Android devices.
- Create and enforce compliance policies, conditional access rules, and app protection policies.
- Drive zero-trust endpoint strategies and ensure a seamless end-user experience.
\n\t
Security Operations & Threat Protection\n\t
- Design, deploy, and manage Microsoft Sentinel as the primary SIEM/SOAR platform across customer environments — including data connectors, analytics rules, workbooks, and automation playbooks.
- Write and tune KQL (Kusto Query Language) queries for threat detection, log analysis, scheduled alert rules, and custom hunting in Sentinel.
- Administer the full Microsoft Defender suite (Defender for Endpoint, Identity, Office 365, and Cloud Apps) and integrate signals into Sentinel for unified incident management.
- Advise on security incident response workflows — triage, investigation, containment, and post-incident review — leveraging Sentinel’s incident queue and Logic App playbooks for automated remediation.
- Implement and optimize threat protection, attack surface reduction, and advanced hunting policies across the M365 security stack.
\n\t
Information Protection, Compliance & Identity\n\t
- Help architect and administer Microsoft Purview solutions — including Information Protection (sensitivity labels, encryption, rights management), Data Loss Prevention (DLP), and retention policies across M365 workloads.
- Help deploy and manage Purview data classification, content explorer, and activity explorer to give customers visibility into sensitive data exposure and risk.
- Leverage Purview Compliance Manager to assess, track, and improve compliance posture against frameworks such as NIST, ISO 27001, and CMMC.
- Configure and maintain Entra identity services (MFA, Conditional Access, Privileged Identity Management) aligned to zero-trust principles.
- Ensure alignment with customer regulatory and compliance requirements, translating compliance obligations into actionable Purview and Sentinel configurations.
\n\t
Collaboration & Productivity\n\t
- Help manage core Microsoft 365 services including Exchange Online, Teams, SharePoint, and OneDrive.
- Support migrations and tenant configurations in multi-tenant environments.
- Provide proactive recommendations to optimize performance and user adoption.
\n\t
Automation & Reporting\n\t
- Use PowerShell and Graph API to automate common administrative tasks.
- Develop Sentinel workbooks, KQL-based dashboards, and executive-level security posture reports covering threat trends, compliance status, and incident metrics for customer stakeholders.
- Document processes and produce knowledge articles for internal and customer use.
\n\t

\nWhat YOU NEED to SUCCEED in this challenging role:\n\n

Experience: 4+ years hands-on managing Microsoft 365 production environments.
Strong proficiency in Intune and Entra identity is expected, but cybersecurity delivery is the core of this role.
Hands-on expertise with Microsoft Sentinel — data connectors, KQL authoring, analytics rules, workbooks, and Logic App playbooks for SOAR automation.
Deep proficiency with Microsoft Purview — sensitivity labels, DLP policies, data classification, Compliance Manager, and information protection across M365 and Azure.
Expert-level knowledge of the Microsoft Defender suite (Endpoint, Identity, Office 365, Cloud Apps) and Intune.
Strong proficiency with Entra identity services (Conditional Access, PIM, MFA) and zero-trust architecture.
Certifications (the following certifications strongly valued):\n\t
- SC-200: Microsoft Security Operations Analyst
- SC-100: Microsoft Cybersecurity Architect Expert (strongly preferred)
- SC-300: Microsoft Identity and Access Administrator Associate
- AZ-500: Microsoft Azure Security Technologies
- MD-102: Endpoint Administrator Associate
\n\t

\nWhat is in it for YOU?\n\n

Excellent Compensation plan includes a salary range in the $90 to $110k range DOE
Comprehensive benefits package
Professional growth and certification support.
Flexible Work Arrangements and a company that values work-life balance
Opportunities to design security-driven modern workplace solutions.
A collaborative, customer-focused culture with exposure to diverse environments.

","datePosted":"2026-06-04T14:20:30.000000Z","hiringOrganization":{"@type":"Organization","name":"GCS Technologies","logo":"https://cdn.brandfetch.io/domain/gcstechnologies.com?c=1id_4BSbc4eMXdiTgjt"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Austin, TX","streetAddress":"Austin, TX, Austin, Texas, United States","addressRegion":"Texas","addressCountry":"United States"}},"validThrough":"2026-07-10","employmentType":"OTHER","baseSalary":{"@type":"MonetaryAmount","currency":"$","value":{"@type":"QuantitativeValue","unitText":"YEAR","minValue":"90000","maxValue":"120000"}},"identifier":{"@type":"PropertyValue","name":"recruitAbility","value":"17805828309760128023RjW"},"directApply":true}