Is this email claiming to be from ******@security-microsoft.us legit?

No. This is very likely a phishing email.

The strongest red flags are:

• security-microsoft.us is not one of the Microsoft support domains listed for Microsoft support email.
• Outlook is showing that it could not verify the sender.
• The via ispservices.org indicator means the actual sending service differs from the displayed sender identity, which is a known warning sign in Outlook when the sender's actual address is different from what appears in the From address.
• The message uses urgency and asks for identity verification through a button, which is a common phishing pattern.

Microsoft support email domains listed in the documentation are:

• microsoft.com
• microsoftsupport.com
• mail.support.microsoft.com
• office365support.com
• techsupport.microsoft.com

A message from a different domain is likely a phishing scam.

Recommended action:

1. Do not click the button, links, or attachments.
2. Delete the message or report it as phishing in Outlook.
3. If account status needs to be checked, open a new browser tab and sign in through the normal Microsoft sign-in page or the account security page directly, not through the email.
4. In Outlook, be cautious with messages that show a ?, an unverified sender warning, or a via tag.

• How to determine if an email from Microsoft support is genuine
• Phishing and suspicious behavior in Outlook
• Protect yourself from phishing
• Possible fake 'Microsoft' email - Microsoft Q&A
• Is this mail legitimate? - Microsoft Q&A