Security Operations Engineering Manager

Microsoft•Redmond, WA

17h•$119,800 - $261,000•Hybrid

About The Position

In alignment with Microsoft values, this role drives organizational strategy, leads by example, and supports team members on their learning journey. The manager will lead the team that implements and operates modern cloud and on-premises cybersecurity controls to defend Microsoft datacenter critical infrastructure from threat actors. This role leverages multiple solutions, partners with internal and external teams, and advances industrial network cybersecurity capabilities. It involves engaging with leadership to enable shared understanding and commitment to the mission. Through on-the-job learning and mentorship, this opportunity offers rare cyber defense, automation, and networking skills in high demand across industries. This is a flexible work opportunity with the option to work from home partially or fully. Microsoft’s Cloud Operations & Innovation (CO+I) is the engine powering Microsoft's cloud services. As a Network Security Service Engineer Manager, you will play a key role in delivering the core infrastructure and foundational technologies for Microsoft's online services, including Bing, Office 365, Xbox, OneDrive, and the Microsoft Azure platform. CO+I focuses on personal and professional development, offering trainings, growth opportunities, Career Rotation Programs, Diversity & Inclusion trainings and events, and professional certifications. Microsoft's infrastructure includes a large global portfolio of over 200 datacenters in 32 countries and millions of servers, managed by subject matter experts supporting services for over 1 billion customers and 20 million businesses worldwide. Environmental sustainability and optimization are at the forefront of datacenter design and operations, supporting Microsoft's evolution as a world-class cloud provider. Microsoft's mission is to empower every person and organization to achieve more. Employees collaborate with a growth mindset, innovate to empower others, and realize shared goals, building on values of respect, integrity, and accountability to create an inclusive culture where everyone can thrive.

Requirements

Doctorate in Statistics, Mathematics, Computer Science, or related field OR Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response OR equivalent experience.
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Nice To Haves

7+ years of experience in cyber security, and anomaly detection
OR Doctorate in Statistics, Mathematics, Computer Science or related field.
2+ years people management.
1+ year(s) leading a security function (e.g., Security Operations Center [SOC], threat and vulnerability management [TVM]).
1+ year(s) leading multi-disciplinary team.
CISSP, CISA, CISM, SANS, GCIA, GCIH, OSCP, and/or Security+ certification.

Responsibilities

Deliver success through empowerment and accountability by modeling, coaching, and caring.
Direct team to address identified security strategy, ensuring proper team resources are available to accomplish goals, and coordinate with partner teams to remediate control failures.
Drive team to implement and manage new automation for greater efficiency in security operations while ensuring measurable business impact and solutions across the organization.
Escalate potential gaps in security policy, provide guidance on current security policies, recommend changes, and drive adoption for new policies.
Guide team to meet threat mitigation service levels with internal and external partners and manage relationships with third-party account management.
Support end-to-end security breach protocol by guiding team in responding, investigating, communicating with stakeholders, resolving, and running post-mortem analysis for any security breaches. Coordinate with partner teams to secure data and maintain chain of custody.
Guide team to develop monitoring and detection capabilities to identify threats and malicious activity, ensuring adequate resources for mitigation, while also collaborating with internal and external partners to leverage and evangelize best practices.
Embody our culture and values.