Ray M.

Microsoft 365 & Cloud Security Consultant | AI Security

I help companies secure Microsoft 365, Microsoft Entra ID, Azure, and cloud environments—identifying identity risks, misconfigurations, excessive privilege, and security gaps before they become incidents or audit findings. My work sits at the intersection of cloud security, identity, Microsoft 365 security, compliance, and AI risk. I can provide an independent security assessment, a prioritized remediation roadmap, or hands-on guidance through remediation. Typical engagements • Microsoft 365 Security Assessment & Hardening — Microsoft Entra ID, Conditional Access, MFA, privileged access, Microsoft Defender, Purview, Intune, and security configuration reviews • Cloud Identity & Security Reviews — Azure, AWS, and GCP IAM, least privilege, configuration risk, logging, access controls, and Zero Trust architecture • AI Security & Governance — LLM and agentic-system threat modeling, data exposure risk, identity and access controls, secure AI architecture, and governance recommendations • Security & Compliance Readiness — ISO 27001, SOC 2, HIPAA security requirements, control-gap assessments, evidence roadmaps, and risk registers • Incident Readiness & Detection — incident-response planning, Microsoft Sentinel, detection gaps, investigation workflows, and security playbooks What you receive My goal is not to hand you a scanner report containing hundreds of findings. You receive an executive-level view of your highest business risks, the evidence behind each finding, prioritized recommendations, and a practical remediation roadmap showing what should be addressed first and why. I bring 10+ years of IT and cybersecurity experience spanning cloud security, identity, incident response, vulnerability management, and security advisory work. My certifications include CISSP, GIAC Security Leadership, CCSK, and Microsoft Azure credentials. What clients say “Best investment I made on Upwork. Ray is quick, thoughtful, organized and made this project SO easy. He's incredibly communicative and so on top of it. 10/10.” If you already have a security concern, send me the environment you're working with—Microsoft 365, Azure, AWS, GCP, or AI and what outcome you need. I'll start by identifying the areas I would validate first.