Job Description

Microsofts Edge and Platform Security Fundamentals (EPSF) team is responsible for securing some of Microsofts largest and most critical online services in Azure and Windows + Devices. We are a part of Azure Edge + Platform (E+P), a globally distributed team responsible for the platforms and services that enable consistent application development and management across the cloud and the edge. We are looking for a hunt-focused Security Operations Engineer to assess and remediate risk across EPSF and Microsoft while ensuring the dependencies on centralized security are functioning correctly.This Security Operations Engineer role is focused on assessing and remediating risk within EPSF and Microsoft. This role will be responsible for identifying and conducting proactive hunts, supporting incident response investigations, participating in Purple Team operations, and maintaining an overall security operational awareness of the EPSF area of responsibility. This role offers the opportunity to collaborate with teams across Edge & Platform, Windows and Devices, and Microsoft Security. We are building a team where diversity of thought and background is valued as strongly as technical skills, and where everyone is encouraged to come up with new ideas to make our customers lives better.Microsofts mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.Responsibilities:

• Hunt for risk across EPSF and Microsoft by supporting incident response, proactive hunts, and Purple Team engagements.

• Maintain operational security awareness, keying on impact to EPSF Services and ensuring leadership is aware of emerging issues.

• Identify, communicate, and close data, process, and security gaps in our areas of operation.

• Work across Microsoft Security and the company to seamlessly integrate with partner teams, incorporating Azure, and E&P product offerings and providing feedback for enrichment.

• Building proof-of-concept and prototype threat hunting tools, automations, and new capabilities

Qualifications:Required/Minimum Qualifications:

• 5+ years of experience in cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, information technology (IT), and operations incident response.

o OR Bachelor's Degree in Statistics, Mathematics, Computer Science or related field.Additional or Preferred Qualifications:

• Experience as a Threat Hunter/Detection Engineer and/or exposure to Security Operations focused environment.

• Experience collaborating with offensive security teams on Purple Team and hunt engagements.

• Microsoft Azure platform knowledge and experience. Good understanding of Azure resources, operations.

• Familiarity with Microsoft Defender 365 security stack (for Endpoints, Identity, Cloud, etc), especially with Advanced Hunting query writing

• Demonstrated understanding of security best practices and industry standards.

• Efficient program management, communication, and collaboration skills.

• Experience as a software engineer with one or more general purpose programming languages/tools including, but not limited to: Azure Data Explorer, C#, Python, PowerShell, Cosmos, SQL.

• Experience optimizing automation, reliability, and monitoring.

• Experience of developing security investigation/threat hunting automations.

• Customer focus and data driven approach.

• Agility in fast paced environment.

#IDCHIringEPHIring
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the .

Microsoft