Cloud / M365 Security Engineer

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects. Who we are supporting At Spektrum, we support a wide range of NATO organizations and programmes by providing highly skilled professionals across defence, security, digital transformation, engineering, and information technology. Our teams contribute to projects that strengthen the Alliance's operational readiness, enhance interoperability between member nations, and enable the delivery of critical capabilities across land, air, maritime, cyber, and space domains. For this opportunity, our client is a private technology company that delivers advanced IT and engineering services in support of NATO programmes. Working alongside NATO stakeholders, the company provides technical expertise, software development, systems integration, and digital solutions that help modernize and sustain mission-critical capabilities. As part of this project, consultants will contribute to the development and support of technologies that underpin NATO's operational effectiveness and long-term digital transformation. Cloud / M365 Security Engineer Role ID: TG-001-3 Role Background The Cloud Computing Support – Expert Support (ICT Security Officer) will provide highly specialized ICT security services in support of the client, covering the ICT environment and systems defined in the overarching Service Level Agreement (SLA) between client and the Office, including the management of a dedicated Microsoft 365 tenant. Services shall be provided in accordance with applicable ICT governance, standards, and security policies, commensurate with the available capacity to ensure reasonable service coverage (5x8 during defined working hours), complemented by a duty officer modality outside working hours under specifically defined conditions to support and respond to urgent security-specific needs, including incident response. Expert Support level: the incumbent shall possess extensive relevant professional experience requiring specialized technical knowledge and skills. He/She will be expected to develop new approaches, techniques, or policies and/or design guidelines and standards of considerable depth that have an impact on the overall execution of programmes or services of a function or various interrelated areas. Expected outputs at this level include, inter alia, highly specialized technical security support and project-wide proposals. Service Scope Cloud & Collaboration Environment Microsoft 365 tenant: Exchange Online, SharePoint Online, OneDrive, Teams, and associated collaboration workloads. Microsoft Entra ID (Azure AD): identities, authentication, conditional access, and privileged accounts within the covered tenant. Microsoft Defender XDR suite: Defender for Office 365, Defender for Endpoint, Defender for Cloud Apps, and Defender for Identity, as deployed. Microsoft Purview and related compliance, audit, and data-protection capabilities, as applicable. Security Monitoring & Response Systems Designated ICT security systems and services generating security reports and alerts for the covered environment. Threat intelligence sources and platforms relevant to the covered environment. Vulnerability identification and assessment capabilities applicable to the covered ICT environment and systems. Resilience & Recovery Operational Resilience (OR) controls implemented and maintained by relevant operations teams across the covered ICT environment and systems. <li data-leveltext="" data-font="Symbol" data-list