Microsoft 365 Security Review & Recommendations

I'm looking for a seasoned professional with deep expertise in Microsoft 365 and Azure security to perform a comprehensive review of our current security configurations. This is a short-term engagement with a high impact on our risk posture.

Scope of Work:

Review Microsoft 365 Defender settings:

XDR, email protection, threat policies


Review Exchange Online Protection:

Anti-spam, anti-phishing, spoofing controls


Review Entra ID / Azure AD:

Role assignments & admin privileges

Conditional Access policies

MFA enforcement

Sign-in risk settings and legacy authentication


Review Microsoft Purview / Compliance Center:

Audit log configuration

Data Loss Prevention (DLP) policies

Retention or legal hold policies, if applicable



Deliverables:

Identify any security gaps or misconfigurations

Provide a list of best practice recommendations

Suggest high-impact, low-effort “quick wins”

Provide guidance on implementation


Access:

Read-only access will be provided via a temporary account

No changes should be made without written approval


Ideal Candidate:

Proven experience with Microsoft 365 security, Entra ID, Defender, and Purview

Familiarity with Microsoft Secure Score and compliance best practices

Strong communication skills and documentation habits