Senior Network Security Engineer

Microsoft•Redmond, WA

3d•$119,800 - $261,000•Hybrid

About The Position

In alignment with Microsoft values, this role cultivates an inclusive work environment to positively impact culture daily. Microsoft’s Cloud Operations & Innovation (CO+I) powers cloud services and the Senior Network Security Engineer will play a key role in delivering core infrastructure and foundational technologies for Microsoft's online services including Bing, Office 365, Xbox, OneDrive, and the Microsoft Azure platform. This role drives technology strategy, leads by example, and supports team members' learning journeys. The engineer will implement and operate modern cloud and on-premises cybersecurity controls to defend Microsoft datacenter critical infrastructure from threat actors. Leveraging multiple solutions and partnering with internal and external teams, this role is at the forefront of advancing industrial network cybersecurity capabilities. Through on-the-job learning and bi-directional mentorship, this opportunity allows for gaining cyber defense, automation, and networking skills and experiences that are rare and in high demand across multiple industries. This is a flexible work opportunity allowing for partial or full remote work. CO+I focuses on personal and professional development, offering trainings and growth opportunities including Career Rotation Programs, Diversity & Inclusion trainings and events, and professional certifications. The infrastructure comprises a large global portfolio of more than 100 datacenters and 1 million servers, supporting services for over 1 billion customers and 20 million businesses in over 90 countries worldwide. Environmental sustainability and optimization are at the forefront of datacenter design and operations, supporting Microsoft's growth as a world-class cloud provider.

Requirements

Doctorate in Statistics, Mathematics, Computer Science, or related field OR Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 3+ years’ experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years’ experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
OR equivalent experience.
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role.
Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Nice To Haves

Own the technical direction and multi-quarter roadmap for network security, translating broader organizational objectives into clear priorities, actionable engineering plans, and measurable outcomes that partner teams can execute against.
Act as the senior technical authority for perimeter and internal network defense, setting direction for next-generation firewalls (such as Palo Alto, Fortinet, Azure Firewall), IDS/IPS, network segmentation and micro-segmentation, VPN and ZTNA, DDoS protection, and TLS inspection.
Drive the design, deployment, and automation of network security controls at scale, applying Infrastructure-as-Code and policy automation (Terraform, firewall-as-code, Azure Policy) to standardize baselines, tune detections, and improve traffic visibility across the network.
Investigate and resolve network-security incidents in your area of ownership, participate in the on-call rotation, and lead postmortems that convert findings into durable engineering improvements.
Skills: Firewalls, Palo Alto Networks, IDS, IPS, IPSEC, DNS, DHCP, influence others, Network security, Lead, trusted advisor, Automation, efficiency
CISSP, CISA, CISM, SANS, GCIA, GCIH, OSCP, PCCSE, PCNSE, PCSAE, CCNP Security, CCIE Security and/or Security+ certification.
Any experience with industrial control systems is preferred (not mandatory)

Responsibilities

Proactively identify and investigate potential issues and patterns in security controls and drive mitigation strategies, while also implementing automation to improve efficiency and effectiveness across the network.
Install, upgrade, and maintain security hardware, operating system and software.
Identify gaps in security policy and administration, recommend solutions, and implement new and revised security standards, while working with partner teams to drive consistency and awareness.
Maintain standards and drive improvements for our customer and partner experience, responding appropriately to emerging issues and advocating for our customer experience through development and analysis of key metrics, performance indicators, and other data sources (e.g. bugs, unhealthy data pipeline).
Respond to escalations and recommend improvements as appropriate to address gaps.
Participate in on-call rotation to support security services.
With minimal guidance, analyze attempted or successful efforts to compromise systems security and, alongside partner teams, create recommendations to limit exposure, implement response plans, and take action.
Analyze potential or actual intrusions identified from monitoring activities and create detections based on available data (e.g., Indicators of Compromise [IOC] and Tools Tactics Procedures [TTP]).
Embody our culture and values.