I run the entire IT and security function for a 50-user federal contractor, sharing a two-person technical team with our CTO. There is no tier above me and no managed service provider behind me. That means I own problems end to end: triaging incidents in Microsoft Defender XDR, hardening the tenant, writing the automation, drafting the policy, then explaining the risk to executives who do not speak in acronyms. 

What I have delivered: 

Raised our Microsoft Secure Score from 54.5% to 83.6% across 30+ endpoints through Conditional Access, MFA enforcement, least-privilege access controls, and endpoint hardening. 

Authored roughly 70% of the compliance program...