[Hiring] E5 Security Lead @CNX

Role Description

The Digital Consultant for Microsoft Security E5 drives measurable customer outcomes by aligning technical delivery to strategic business objectives across Data Security, Threat Protection (XDR), and Identity/Zero Trust. This role supports how to operationalize the full Microsoft Security E5 suite (Purview, Defender XDR, Entra/Zero Trust) and deliver tangible risk reduction, compliance, and operational excellence.

• Drive adoption of advanced security controls: MIP labels, DLP (including Endpoint DLP), IRM, DSPM, Conditional Access, MFA, PIM, and Identity Protection.
• Operationalize Defender XDR workloads: MDE, MDO, MDI, MDA.
• Guide customers through Zero Trust modernization: Retire legacy identity dependencies, onboard apps to modern auth, and enforce staged Conditional Access and PIM rollouts.
• Align data, identity, and device posture: Integrate Purview, Entra, and Defender controls for end-to-end protection.
• Register and track usage commitments, milestones, and outcomes in enterprise reporting systems; maintain precise reporting hygiene.
• Coach customers on incident investigation and SOC workflows across Entra, Defender XDR, and Purview signals.
• Coordinate handoffs to Unified Delivery or partners for advanced configurations, deep-dive SOC runbooks, or complex policy programs.

Qualifications

• Hands-on experience with Microsoft Security E5 workloads: Purview (MIP, DLP, IRM, DSPM), Defender XDR (MDE, MDO, MDI, MDA), Entra ID P2 (Conditional Access, MFA, PIM, Identity Protection).
• Strong understanding of data governance, compliance frameworks, Zero Trust principles, and incident response.
• Experience documenting repeatable accelerators and maintaining milestone hygiene.
• Excellent communication skills for technical and executive audiences; ability to link technical adoption to business outcomes.

Requirements

• Experience in SOC or Incident Response workflows; comfort with automated investigation and response.
• Consulting background in outcome-based delivery, especially in regulated industries and multi-cloud environments.
• Familiarity with Adaptive Protection, insider risk signals, Sentinel attach motions, and data lifecycle governance.
• Experience planning legacy identity retirements and app migration to modern authentication.
• Understanding of Microsoft Purview, Data Security, and Responsible AI.
• Security Fundamentals (Level 100/200): Solid understanding of core security concepts, frameworks, and Microsoft security solutions. Ability to identify security risks, categorize issues, and recommend next steps or escalation paths.
• Microsoft 365 Fundamentals (Level 100): Foundational knowledge of Microsoft 365 workloads (Teams, SharePoint, Exchange, etc.) to understand how these services integrate with security solutions.
• Solution Awareness & Partner Ecosystem: Ability to recognize which partner offers or Microsoft solutions address specific customer challenges. Skilled in diagnosing customer scenarios and aligning them with the right solution set.
• Problem Categorization & Next-Step Planning: Competence in assessing customer environments, classifying issues, and determining the appropriate remediation or engagement strategy.
• Defender for Endpoint/XDR Ninja Training (or equivalent).
• IAPP CIPM/CIPP or equivalent industry data protection credential.
• Microsoft Sentinel/SIEM-related skilling.

Benefits

• #LI-Remote
• #Mexico
• #CostaRica
• #WFH