Microsoft Security Support Analyst / Engineer

CTIS is seeking a highly technical Microsoft Security Support Analyst / Engineer / Lead to provide co-managed Managed Detection and Response (MDR) services in support of a government client.

The successful candidate will serve as a hands-on extension of the client’s security team, leveraging deep expertise across the Microsoft Security ecosystem to monitor, investigate, and respond to security threats while supporting continuous improvement of the organization’s security posture., * Monitor security alerts and conduct hands-on threat investigation and triage.

• Support incident response activities and provide recommendations for remediation.
• Analyze security findings and identify opportunities to improve security operations and posture.
• Work collaboratively with government security personnel in a co-managed environment.
• Provide knowledge transfer, operational guidance, and documentation to internal staff.
• Assist with tuning and optimization of security tools and processes.

Candidates must have hands-on experience managing, tuning, and investigating threats using:

• Microsoft Sentinel - SIEM/SOAR; KQL experience strongly preferred
• Microsoft Defender Suite - XDR, Endpoint, Identity, Cloud Apps, and Office 365
• Microsoft Entra ID
• Fortinet and/or Cisco security platforms, * Proven experience delivering MDR or similar security operations services.
• Experience supporting government or large public-sector organizations.
• Strong incident response and threat investigation experience.
• Ability to work effectively in a co-managed environment alongside government personnel.
• Relevant industry certifications such as Microsoft SC-200, SC-100, CySA+, or CISSP are highly preferred.