Cybersecurity Lead - MICROSOFT SECURITY STACK

SDH Systems is looking for a seasoned Cybersecurity Lead to own and grow a portfolio of enterprise client security engagements built on the Microsoft security platform. The Professional will serve as the senior security advisor across clients, translating business risk into architecture decisions, governing security operations, and leading a team of security engineers and analysts. This is a high-visibility role that spans strategy, architecture, delivery, and client relationship management.

Microsoft Security Stack · Client Portfolio Management · 10+ Years Experience, Own end-to-end security posture across a portfolio of enterprise clients, acting as primary escalation point and trusted advisor

10+ years of progressive cybersecurity experience, with at least 5 years in a client-facing consulting or managed security services role

Architect and deliver Microsoft-native security solutions spanning identity, endpoint, cloud, SIEM, and compliance domains

Deep hands-on expertise with Microsoft Sentinel (KQL, analytics rules, SOAR playbooks) and Defender XDR suite

Lead threat detection, incident response, and vulnerability management programs using Sentinel, Defender XDR, and Entra ID

Strong command of Microsoft Entra ID, Conditional Access, PIM, Identity Governance, and Lifecycle Workflows

Drive security assessments, risk reporting, and roadmap planning aligned to client business objectives and regulatory requirements

Experience securing Microsoft 365 environments: Defender for Office 365, Purview, DLP, and Compliance Manager

Mentor and manage a team of security engineers; run QBRs and executive briefings with client stakeholders

Proficiency with Microsoft Intune for endpoint management and security policy enforcement

Define and enforce secure architecture standards, IAM governance frameworks, and Zero Trust adoption plans

Demonstrated experience managing multiple client accounts with accountability for SLAs and outcomes

Collaborate with sales and pre-sales on security proposals, SOW scoping, and capability demonstrations

Strong executive communication skills; ability to translate technical risk to business language

Stay current on emerging threats, Microsoft product releases, and frameworks (NIST, CIS, ISO 27001)

Relevant certifications: SC–300, AZ-500, MS-500 (one or more required)

Microsoft Technology Scope

Defender & SIEM, Logic Apps / SOAR

MS Graph API

Lighthouse (multi-tenant)

PowerShell / Azure CLI

Preferred Qualifications

Microsoft MVP in Security or demonstrated community leadership and contributions

Experience with Security Copilot agent development or AI-assisted security operations

Familiarity with post-quantum cryptography, Zero Trust Network Access (ZTNA), and SASE frameworks

Prior experience with tenant-to-tenant migrations or large-scale M365 consolidations

Knowledge of CrowdStrike, F5, Palo Alto and integration patterns with the Microsoft stack

Background in regulated industries: healthcare, financial services, energy, or government

Depends on Experience