M365 Security Consultant

Solihull
1 month ago
Applications closed

Related Jobs

View all jobs

Penetration Tester | CHECK Team Member

Senior Infrastructure Architect

SecOps Engineer

Information Security Manager

Migration Engineer

It Support

M365 Security Consultant (Outside IR35)

Day Rate: £550 p/d
Contract Length: 3–6 months (initial 3‑month engagement with possible extension)
Location: Remote – MUST be based in the UK
Engagement: Outside IR35
Start: ASAP

We are seeking a highly capable, delivery‑focused M365 Security Consultant to execute a series of time‑boxed security improvement phases across device management, identity, access, and multiple site security.

This role is not advisory or architectural only—the contractor must deliver hands‑on implementation of security controls aligned to:

CIS Critical Security Controls v8 – IG2
CIS Benchmarks
NIST Cybersecurity Framework – Tier 3 (Repeatable)
Key Responsibilities

Mobile Device Management (MDM)

Design MDM setup for corporate and BYOD devices.
Define required MDM/MAM/Conditional Access configuration aligned to CIS IG2.
Implement and enforce:

Corporate and BYOD MDM policies
Separate compliance & Conditional Access policies
MAM controls and approved application enforcement

Deploy applications via Company Portal.
Document configuration, exceptions, and operational guidance.
Ensure security and compliance visibility/reporting is operational.
Identity, SSO & MFA

Assess current identity and authentication controls.
Define scope and implementation plan for SSO and MFA.
Implement SSO/MFA policies and Conditional Access configurations.
Enforce authentication policies with evidence of operation.
Deliver operational documentation and testing evidence.
Device Hardening &  “Bricks & Morter” Security

Define device hardening baselines aligned to CIS Benchmarks.
Implement and enforce the hardening baseline using technical controls.
Conduct multiple site location security and architecture review.
Deliver and implement actionable security remediation.
Evidence compliance and enforcement.
Required Experience

Technical Expertise

Proven hands‑on experience implementing Intune/Endpoint Manager for Corporate + BYOD environments.
Strong capability implementing MAM, Conditional Access, App Protection Policies, and Zero Trust aligned controls.
Solid experience with Azure AD / Entra ID, MFA, SSO, and identity governance.
Practical delivery of security hardening aligned to CIS Benchmarks.
Experience working with retail or distributed site/store environments (desirable).
Security Framework Knowledge

Deep understanding of:

CIS Controls v8 (IG2)
CIS Benchmarks
NIST CSF (Tier 3 maturity)

Delivery Profile

Must be a hands‑on implementer (not advisory or consultancy only).
Able to work in fast‑paced, time‑boxed delivery cycles.
Comfortable with weekly milestone reporting and governance.
Capable of documenting exceptions, justifications, and compensating controls.
Key Deliverables

MDM current-state assessment and CIS‑aligned configuration design.
Implemented MDM, MAM, and Conditional Access policies in production.
Fully implemented and enforced MFA and SSO.
Auth, device, and application compliance reporting.
Enforced CIS‑aligned device hardening baseline.
Implemented store security improvements.
Complete technical documentation, evidence of implementation, and handover materials.
Documented control exceptions with technical justification

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

SOC Analyst Jobs UK 2026: Salaries, Skills & How to Get Hired

Cyber security is one of the UK's fastest-growing career paths — and SOC analyst is where most people begin. It's in high demand, genuinely accessible, and you don't need a degree or years of experience to get started. But knowing what UK employers actually want in 2026 — what they pay, which certs matter, and how to stand out — is a different matter. This guide covers all of it.

How Many Cyber Security Tools Do You Need to Know to Get a Cyber Security Job?

If you are trying to build or move forward in a cyber security career, it can feel like the list of tools you are expected to know never ends. One job advert asks for SIEM platforms, another mentions penetration testing tools, another lists cloud security, threat intelligence platforms, endpoint detection, scripting languages and compliance frameworks. Scroll LinkedIn and it gets worse. Everyone seems to “know” dozens of tools, certifications and platforms. Here is the reality most cyber security hiring managers agree on: they are not hiring you because you know every tool. They are hiring you because you understand risk, can think like an attacker and a defender, follow process, communicate clearly and make good decisions under pressure. Tools matter — but only when they support those outcomes. So how many cyber security tools do you actually need to know to get a job? For most job seekers, the answer is far fewer than you think. This article explains what employers really expect, which tools are essential, which are role-specific and how to focus your learning so you look credible, not overwhelmed.

What Hiring Managers Look for First in Cyber Security Job Applications (UK Guide)

If you want to stand out in the highly competitive world of cyber security job applications, you need to understand what hiring managers look for before they even finish reading a CV. Cyber security hiring managers scan applications quickly and with specific priorities in mind. They assess not just your technical ability, but your judgement, professionalism, clarity, risk awareness and evidence of impact. This guide explains what hiring managers look for first in cyber security applications across roles like Security Analyst, Security Engineer, Penetration Tester, Incident Responder, Security Architect, Governance Risk and Compliance specialists and Cloud Security positions. Use this as a practical, step-by-step checklist to sharpen your CV, LinkedIn profile, cover letter and portfolio before you apply on www.cybersecurityjobs.tech .