Security Operations Engineer - Cloud Security
About The Position
Microsoft's Cloud Operations & Innovation (CO+I) organization operates the infrastructure powering Microsoft's online services. The Security Operations Engineer will implement and operate cloud and on-premises cybersecurity controls to defend critical datacenter infrastructure, and will work with internal and external partners to advance industrial network cybersecurity capabilities. The role offers on-the-job learning and mentorship in cyber defense, automation, and networking. It is described as a flexible work opportunity that may be performed partially or fully from home. The role supports Microsoft's global datacenter environment, which includes more than 100 datacenters and 1 million servers. Responsibilities include operating cloud security controls, automating security standards at fleet scale, investigating incidents and potential intrusions, improving detections and response processes, and participating in an on-call rotation.
Requirements
- A master's degree in Statistics, Mathematics, Computer Science, or a related field and at least 1 year of experience in cybersecurity, anomaly detection, SOC detection, threat analytics, SIEM, IT, or operations incident response; or a bachelor's degree in one of these fields and at least 2 years of relevant experience; or equivalent experience.
- Ability to meet Microsoft, customer, and/or government security screening requirements, including passing the Microsoft Cloud background check upon hire or transfer and every two years thereafter.
Nice To Haves
- CISSP, CISA, CISM, SANS, GCIA, GCIH, OSCP, PCCSE, PCNSE, PCSAE, CCNP Security, CCIE Security, and/or Security+ certification.
- Experience with industrial control systems.
Responsibilities
- Proactively identify and investigate potential issues and patterns in security controls, recommend mitigation strategies, and identify opportunities for automation.
- Install, upgrade, and maintain security hardware, operating systems, and software.
- Identify gaps in security policy and administration, recommend solutions, and implement new and revised security standards with partner teams.
- Maintain standards and improve customer and partner experience by analyzing metrics, performance indicators, bugs, and unhealthy data pipelines; escalate issues and recommend improvements.
- Participate in an on-call rotation to support security services.
- Analyze attempted or successful efforts to compromise systems, recommend ways to limit exposure, implement response plans, and take action with partner teams.
- Analyze potential or actual intrusions identified through monitoring and create detections using available data, including indicators of compromise and tools, tactics, and procedures.
- Design, deploy, and operate cloud security controls, including WAF, NSG, Azure Firewall, Defender for Cloud, PIM, Key Vault, and network isolation patterns.
- Drive infrastructure-as-code and automation using Bicep, Terraform, PowerShell, and Azure Policy to enforce baselines, reduce manual work, and make cloud-security changes auditable and repeatable at fleet scale.
- Investigate and resolve cloud-security incidents in the area of ownership, participate in on-call rotation, and lead postmortems that translate findings into durable engineering improvements.
- Embody Microsoft's culture and values.
Benefits
- Training and growth opportunities, including Career Rotation Programs, Diversity & Inclusion trainings and events, and professional certifications.
- Certain roles may be eligible for benefits and other compensation.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
