Security Operations Engineering Manager

Microsoft•Atlanta, GA

2d•$119,800 - $234,700•Hybrid

About The Position

In alignment with Microsoft values, this role drives organizational strategy, leads by example, and supports team members' learning journeys. The Security Operations Engineering Manager will manage a team that implements and operates modern cloud and on-premises cybersecurity controls to defend Microsoft datacenter critical infrastructure from threat actors. This role is at the forefront of advancing industrial network cybersecurity capabilities, leveraging multiple solutions and partnering with internal and external teams. It involves engaging with leadership to enable shared understanding and commitment to the mission. Through on-the-job learning and mentorship, this opportunity offers rare cyber defense, automation, and networking skills and experiences in high demand across industries. This is a flexible work opportunity, allowing for partial or full remote work. Microsoft’s Cloud Operations & Innovation (CO+I) powers Microsoft's cloud services, and this role is key in delivering the core infrastructure and foundational technologies for services like Bing, Office 365, Xbox, OneDrive, and Microsoft Azure. CO+I focuses on employee personal and professional development, offering training, growth opportunities, Career Rotation Programs, Diversity & Inclusion initiatives, and professional certifications. The infrastructure includes a global portfolio of over 200 datacenters, millions of servers, and supports over 1 billion customers and 20 million businesses worldwide. Environmental sustainability and optimization are central to datacenter design and operations. Microsoft's mission is to empower every person and organization on the planet to achieve more. Employees foster a growth mindset, innovate to empower others, and collaborate to achieve shared goals, building on values of respect, integrity, and accountability to create an inclusive culture where everyone can thrive.

Requirements

Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response.
OR Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response.
OR Doctorate in Statistics, Mathematics, Computer Science, or related field OR equivalent experience.
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Nice To Haves

7+ years of experience in cyber security, and anomaly detection and response.
OR Doctorate in Statistics, Mathematics, Computer Science or related field.
2+ years people management.
1+ year(s) leading a security function (e.g., Security Operations Center [SOC], threat and vulnerability management [TVM], authentication and access management).
1+ year(s) leading multi-disciplinary team.
Experience owning/managing security service to internal or external customers
CISSP, CISA, CISM, SANS, GCIA, GCIH, OSCP, and/or Security+ certification.

Responsibilities

People Management: Deliver success through empowerment and accountability by modeling, coaching, and caring.
Security Delivery: Direct team to address identified security strategy, ensuring proper team resources are available to accomplish goals, and coordinate with partner teams to remediate control failures.
Drive team to implement and manage new automation for greater efficiency in security operations while ensuring measurable business impact and solutions across the organization.
Escalate potential gaps in security policy, provide guidance on current security policies, recommend changes, and drive adoption for new policies.
Lead network security operations/engineering across firewalls, IDS/IPS, network infrastructure, cloud security, and identity services, ensuring platform reliability, policy compliance, telemetry coverage, operational readiness, and timely remediation of security risks.
Support end-to-end security breach protocol by guiding team in responding, investigating, communicating with stakeholders, resolving, and running post-mortem analysis for any security breaches.
Coordinate with partner teams to secure data and maintain chain of custody.
Lead global security operations across Microsoft Sentinel and OT environments, driving 24x7 monitoring, detection engineering, threat hunting, incident response, automation, and regional coordination across AMER, EMEA, and APAC while measuring detection coverage, service-level attainment, MTTD, and MTTR.
Embody our culture and values.