Microsoft Security Support Analyst / Engineer / Lead

Employment Type: Contingent

Location: Remote

Work Hours: Candidates must be available during standard AST/EST business hours

Anticipated Start Date: December 1, 2026

Position Status: Contingent upon contract award

Position Summary

CTIS is seeking a highly technical Microsoft Security Support Analyst / Engineer / Lead to provide co-managed Managed Detection and Response (MDR) services in support of a government client.

The successful candidate will serve as a hands-on extension of the client's security team, leveraging deep expertise across the Microsoft Security ecosystem to monitor, investigate, and respond to security threats while supporting continuous improvement of the organization's security posture.

Key Responsibilities

• Monitor security alerts and conduct hands-on threat investigation and triage.
• Support incident response activities and provide recommendations for remediation.
• Analyze security findings and identify opportunities to improve security operations and posture.
• Work collaboratively with government security personnel in a co-managed environment.
• Provide knowledge transfer, operational guidance, and documentation to internal staff.
• Assist with tuning and optimization of security tools and processes.

Required Technical Skills

Candidates must have hands-on experience managing, tuning, and investigating threats using:

• Microsoft Sentinel – SIEM/SOAR; KQL experience strongly preferred
• Microsoft Defender Suite – XDR, Endpoint, Identity, Cloud Apps, and Office 365
• Microsoft Entra ID
• Fortinet and/or Cisco security platforms

Required Qualifications

• Proven experience delivering MDR or similar security operations services.
• Experience supporting government or large public-sector organizations.
• Strong incident response and threat investigation experience.
• Ability to work effectively in a co-managed environment alongside government personnel.
• Relevant industry certifications such as Microsoft SC-200, SC-100, CySA+, or CISSP are highly preferred.

Additional Information

This position is contingent upon contract award. The anticipated contract start date is approximately December 1, 2026. Candidates must be available to support standard AST/EST business hours.