Job description

Overview In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day and we need you as a Security Operations Engineering Manager. As a Security Operations Engineering Manager you will drive our organizational strategy, lead by example, and support team members on their learning journey. You will manage the team that implements and operates modern cloud and on premises cybersecurity controls to defend Microsoft datacenter critical infrastructure from threat actors. Leveraging multiple solutions and partnering with internal and external teams, you will be at the forefront of advancing industrial network cybersecurity capabilities and engaging with leadership to enable shared understanding and commitment to mission. Through on the job learning and bi-directional mentorship, this opportunity will allow you to gain cyber defense, automation, and networking skills and experiences that are rare in both networking and security organizations, and in high demand across multiple industries. This is a flexible work opportunity for you to work from home partially or fully if desired. Microsoft’s Cloud Operations & Innovation (CO+I) is the engine that powers our cloud services. As a Security Operations Engineering Manager you will perform a key role in delivering the core infrastructure and foundational technologies for Microsoft's online services including Bing, Office 365, Xbox, OneDrive, and the Microsoft Azure platform. As a group, CO+I is focused on the personal and professional development for all employees and offers trainings and growth opportunities including Career Rotation Programs, Diversity & Inclusion trainings and events, and professional certifications. Our infrastructure is comprised of a large global portfolio of more than 200 datacenters in 32 countries and millions of servers. Our foundation is built upon and managed by a team of subject matter experts working to support services for more than 1 billion customers and 20 million businesses in over 90 countries worldwide. With environmental sustainability and optimization at the forefront of our datacenter design and operations, we continue to grow and evolve as we meet the ever-changing business demands that hold Microsoft as a world-class cloud provider. Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day and we need you as a Security Operations Engineering Manager . As a Security Operations Engineering Manager you will drive our organizational strategy, lead by example, and support team members on their learning journey. You will manage the team that implements and operates modern cloud and on premises cybersecurity controls to defend Microsoft datacenter critical infrastructure from threat actors. Leveraging multiple solutions and partnering with internal and external teams, you will be at the forefront of advancing industrial network cybersecurity capabilities and engaging with leadership to enable shared understanding and commitment to mission. Through on the job learning and bi-directional mentorship, this opportunity will allow you to gain cyber defense, automation, and networking skills and experiences that are rare in both networking and security organizations, and in high demand across multiple industries. This is a flexible work opportunity for you to work from home partially or fully if desired. Microsoft’s Cloud Operations & Innovation (CO+I) is the engine that powers our cloud services. As a Network Security Service Engineer Manager you will perform a key role in delivering the core infrastructure and foundational technologies for Microsoft's online services including Bing, Office 365, Xbox, OneDrive, and the Microsoft Azure platform. As a group, CO+I is focused on the personal and professional development for all employees and offers trainings and growth opportunities including Career Rotation Programs, Diversity & Inclusion trainings and events, and professional certifications. Our infrastructure is comprised of a large global portfolio of more than 200 datacenters in 32 countries and millions of servers. Our foundation is built upon and managed by a team of subject matter experts working to support services for more than 1 billion customers and 20 million businesses in over 90 countries worldwide. With environmental sustainability and optimization at the forefront of our datacenter design and operations, we continue to grow and evolve as we meet the ever-changing business demands that hold Microsoft as a world-class cloud provider. Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. Responsibilities People Management • Deliver success through empowerment and accountability by modeling, coaching, and caring. Security Delivery • Direct team to address identified security strategy, ensuring proper team resources are available to accomplish goals, and coordinate with partner teams to remediate control failures. • Drive team to implement and manage new automation for greater efficiency in security operations while ensuring measurable business impact and solutions across the organization. • Escalate potential gaps in security policy, provide guidance on current security policies, recommend changes, and drive adoption for new policies. • Lead network security operations/engineering across firewalls, IDS/IPS, network infrastructure, cloud security, and identity services, ensuring platform reliability, policy compliance, telemetry coverage, operational readiness, and timely remediation of security risks. • Support end to end security breach protocol by guiding team in responding, investigating, communicating with stakeholders, resolving, and running post-mortem analysis for any security breaches. Coordinate with partner teams to secure data and maintain chain of custody. • Lead global security operations across Microsoft Sentinel and OT environments, driving 24×7 monitoring, detection engineering, threat hunting, incident response, automation, and regional coordination across AMER, EMEA, and APAC while measuring detection coverage, service-level attainment, MTTD, and MTTR. Other • Embody our culture and values . Qualifications Required Qualifications: • Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response. • OR Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response • OR Doctorate in Statistics, Mathematics, Computer Science, or related field • OR equivalent experience. Background Check Requirements: Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: • Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter. Preferred Qualifications: • 7+ years of experience in cyber security, and anomaly detection and response. • OR Doctorate in Statistics, Mathematics, Computer Science or related field. • 2+ years people management. • 1+ year(s) leading a security function (e.g., Security Operations Center [SOC], threat and vulnerability management [TVM], authentication and access management). • 1+ year(s) leading multi-disciplinary team. • Experience owning/managing security service to internal or external customers • CISSP, CISA, CISM, SANS, GCIA, GCIH, OSCP, and/or Security+ certification. Security Operations Engineering M4 - The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $160,200 - $261,000 per year. Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: careers.microsoft.com This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Requirements

Must-haves

People Management
Deliver success through empowerment and accountability by modeling, coaching, and caring.
Security Delivery
Direct team to address identified security strategy, ensuring proper team resources are available to accomplish goals, and coordinate with partner teams to remediate control failures.
Drive team to implement and manage new automation for greater efficiency in security operations while ensuring measurable business impact and solutions across the organization.
Escalate potential gaps in security policy, provide guidance on current security policies, recommend changes, and drive adoption for new policies.
Embody our culture and values .
OR Doctorate in Statistics, Mathematics, Computer Science, or related field
OR equivalent experience.
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:
Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.
7+ years of experience in cyber security, and anomaly detection and response. • OR Doctorate in Statistics, Mathematics, Computer Science or related field.
2+ years people management.
1+ year(s) leading a security function (e.g., Security Operations Center [SOC], threat and vulnerability management [TVM], authentication and access management).
1+ year(s) leading multi-disciplinary team.
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Nice-to-haves

Experience owning/managing security service to internal or external customers
CISSP, CISA, CISM, SANS, GCIA, GCIH, OSCP, and/or Security+ certification.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azure

Platform: eightfold
Effort: medium

Benefits

Benefits detected in the listing.

Professional Development