ELEVI Associates

Security Engineer

• Conduct a thorough audit of the Google Workspace for Education Plus tenant via the Google Admin Console
• Analyze configurations against industry best practices
• Review and harden Gmail settings, including SPF, DKIM, DMARC, compliance routing, and advanced anti-phishing rules
• Review and harden Google Drive settings, including external sharing policies, link defaults, and DLP rules
• Evaluate mandatory MFA and design a transition plan toward phishing-resistant MFA, including FIDO2 security keys, Passkeys, and Context-Aware Access policies
• Analyze account compromise patterns and investigate session hijacking methodologies
• Recommend automated controls to detect and block internal spam blasts
• Deliver a prioritized findings report with immediate remediation, medium-term configurations, and long-term security governance recommendations

Google Workspace Security Subject Matter Expert