Security Operations Engineering Manager

Microsoft•Atlanta, GA

2d•$119,800 - $261,000•Hybrid

About The Position

In alignment with Microsoft values, this role cultivates an inclusive work environment and drives organizational strategy. The Security Operations Engineering Manager will lead a team responsible for implementing and operating modern cloud and on-premises cybersecurity controls to defend Microsoft datacenter critical infrastructure from threat actors. This role involves leveraging multiple solutions, partnering with internal and external teams, advancing industrial network cybersecurity capabilities, and engaging with leadership. The position offers on-the-job learning and mentorship in cyber defense, automation, and networking skills, with a flexible work opportunity (partial or full remote). Microsoft’s Cloud Operations & Innovation (CO+I) powers Microsoft's cloud services, and this role is key in delivering core infrastructure and foundational technologies for services like Bing, Office 365, Xbox, OneDrive, and Microsoft Azure. CO+I focuses on employee development through programs like Career Rotation, Diversity & Inclusion trainings, and professional certifications. Microsoft's infrastructure includes over 200 datacenters globally, supporting billions of customers and millions of businesses. Environmental sustainability is a key focus in datacenter design and operations. Microsoft's mission is to empower every person and organization, fostering a culture of respect, integrity, accountability, and inclusion with a growth mindset.

Requirements

Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response.
OR Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
OR Doctorate in Statistics, Mathematics, Computer Science, or related field
OR equivalent experience.
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Nice To Haves

7+ years of experience in cyber security, and anomaly detection and response.
OR Doctorate in Statistics, Mathematics, Computer Science or related field.
2+ years people management.
1+ year(s) leading a security function (e.g., Security Operations Center [SOC], threat and vulnerability management [TVM], authentication and access management).
1+ year(s) leading multi-disciplinary team.
Experience owning/managing security service to internal or external customers
CISSP, CISA, CISM, SANS, GCIA, GCIH, OSCP, and/or Security+ certification.

Responsibilities

Deliver success through empowerment and accountability by modeling, coaching, and caring.
Direct team to address identified security strategy, ensuring proper team resources are available to accomplish goals, and coordinate with partner teams to remediate control failures.
Drive team to implement and manage new automation for greater efficiency in security operations while ensuring measurable business impact and solutions across the organization.
Escalate potential gaps in security policy, provide guidance on current security policies, recommend changes, and drive adoption for new policies.
Lead network security operations/engineering across firewalls, IDS/IPS, network infrastructure, cloud security, and identity services, ensuring platform reliability, policy compliance, telemetry coverage, operational readiness, and timely remediation of security risks.
Support end to end security breach protocol by guiding team in responding, investigating, communicating with stakeholders, resolving, and running post-mortem analysis for any security breaches. Coordinate with partner teams to secure data and maintain chain of custody.
Lead global security operations across Microsoft Sentinel and OT environments, driving 24×7 monitoring, detection engineering, threat hunting, incident response, automation, and regional coordination across AMER, EMEA, and APAC while measuring detection coverage, service-level attainment, MTTD, and MTTR.
Embody our culture and values.