Security Operations Engineer - Cloud Security

Microsoft • Redmond, WA

2d • Remote

About The Position

Microsoft’s Cloud Operations & Innovation (CO+I) organization operates the infrastructure powering Microsoft’s cloud services, including Bing, Office 365, Xbox, OneDrive, and Azure. The Security Operations Engineer will implement and operate cloud and on-premises cybersecurity controls to protect critical datacenter infrastructure. The role works with internal and external partner teams to advance network and industrial cybersecurity capabilities, investigate potential threats and incidents, and improve security operations through automation and engineering practices.

The position supports a global datacenter environment and includes opportunities for on-the-job learning, mentorship, training, career development, and professional certifications. Work may be performed partially or fully from home. The role participates in an on-call rotation and investigates and responds to cloud-security incidents.

Requirements

• Master’s degree in Statistics, Mathematics, Computer Science, or a related field and at least 1 year of experience in cybersecurity, anomaly detection, SOC detection, threat analytics, SIEM, IT, or operations incident response; or a bachelor’s degree in one of these fields and at least 2 years of relevant experience; or equivalent experience.
• Ability to meet Microsoft, customer, and/or government security screening requirements.
• Ability to pass the Microsoft Cloud Background Check upon hire or transfer and every two years thereafter.

Nice To Haves

• CISSP, CISA, CISM, SANS, GCIA, GCIH, OSCP, PCCSE, PCNSE, PCSAE, CCNP Security, CCIE Security, and/or Security+ certification.
• Experience with industrial control systems.

Responsibilities

• Proactively identify and investigate potential issues and patterns in security controls, recommend mitigation strategies, and identify opportunities for automation.
• Install, upgrade, and maintain security hardware, operating systems, and software.
• Identify gaps in security policy and administration, recommend solutions, and implement new or revised security standards in partnership with other teams.
• Maintain standards and improve customer and partner experience by analyzing metrics, performance indicators, bugs, unhealthy data pipelines, and other data sources.
• Escalate issues and recommend improvements to address gaps.
• Participate in an on-call rotation to support security services.
• Analyze attempted or successful efforts to compromise systems, recommend ways to limit exposure, implement response plans, and take action with partner teams.
• Analyze potential or actual intrusions identified through monitoring and create detections using available data, including indicators of compromise and tools, tactics, and procedures.
• Design, deploy, and operate cloud security controls, including WAF, NSG, Azure Firewall, Defender for Cloud, PIM, Key Vault, and network isolation patterns.
• Drive infrastructure-as-code and automation using Bicep, Terraform, PowerShell, and Azure Policy to enforce baselines, reduce manual work, and make cloud-security changes auditable and repeatable at fleet scale.
• Investigate and resolve cloud-security incidents within the role’s area of ownership, participate in the on-call rotation, and lead postmortems that translate findings into durable engineering improvements.
• Embody Microsoft’s culture and values.

Benefits

• Training and growth opportunities, including Career Rotation Programs, Diversity & Inclusion trainings and events, and professional certifications.
• Certain roles may be eligible for benefits and other compensation.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level