Security Operations Engineer - Cloud Security

Microsoft•Redmond, WA

1d•$102,100 - $219,200•Hybrid

About The Position

In alignment with Microsoft values, this role is part of Microsoft’s Cloud Operations & Innovation (CO+I) team, which powers Microsoft's cloud services. The Security Operations Engineer - Cloud Security will perform a key role in delivering core infrastructure and foundational technologies for Microsoft's online services, including Bing, Office 365, Xbox, OneDrive, and the Microsoft Azure platform. The role involves implementing and operating modern cloud and on-premises cybersecurity controls to defend Microsoft datacenter critical infrastructure from threat actors. This position offers on-the-job learning, bi-directional mentorship, and opportunities to gain cyber defense, automation, and networking skills. It is a flexible work opportunity, allowing for partial or full remote work. CO+I focuses on personal and professional development, offering training, growth opportunities, Career Rotation Programs, Diversity & Inclusion initiatives, and professional certifications. The infrastructure supported includes over 100 datacenters and 1 million servers, serving over 1 billion customers and 20 million businesses globally. Environmental sustainability and optimization are key aspects of datacenter design and operations.

Requirements

Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 1+ year(s) experience in cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 2+ years experience in cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response OR equivalent experience.
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role.
Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Nice To Haves

CISSP, CISA, CISM, SANS, GCIA, GCIH, OSCP, PCCSE, PCNSE, PCSAE, CCNP Security, CCIE Security and/or Security+ certification.
Any experience with industrial control systems is preferred (not mandatory)

Responsibilities

Proactively identify and investigate potential issues and patterns in security controls and recommend mitigation strategies, while also surfacing opportunities for automation to improve efficiency and effectiveness across the network.
Install, upgrade, and maintain security hardware, operating system and software.
Identify gaps in security policy and administration, recommend solutions, and implement new and revised security standards, while working with partner teams to drive consistency and awareness.
Maintain standards and drive improvements for our customer and partner experience, responding appropriately to emerging issues and advocating for our customer experience through analyzing key metrics, performance indicators, and other data sources (e.g. bugs, unhealthy data pipeline). Escalate, recommend improvements as appropriate to address gaps.
Participate in on-call rotation to support security services.
With minimal guidance, analyze attempted or successful efforts to compromise systems security and, alongside partner teams, create recommendations to limit exposure, implement response plans, and take action.
Analyze potential or actual intrusions identified from monitoring activities and create detections based on available data (e.g., Indicators of Compromise [IOC] and Tools Tactics Procedures [TTP]).
Design, deploy, and operate cloud security controls including WAF, NSG, Azure Firewall, Defender for Cloud, PIM, Key Vault, and network isolation patterns — with minimal supervision.
Drive Infrastructure-as-Code and automation (Bicep, Terraform, PowerShell, Azure Policy) to enforce baselines, eliminate manual toil, and make cloud-security changes auditable and repeatable at fleet scale.
Investigate and resolve cloud-security incidents in your area of ownership, participate in the on-call rotation, and lead postmortems that convert findings into durable engineering improvements.
Embody our culture and values.