Security Operations Engineering Manager

Microsoft is a global technology company delivering cloud services and foundational infrastructure through its Cloud Operations & Innovation organization. The Security Operations Engineering Manager leads teams responsible for implementing and operating cybersecurity controls for datacenter critical infrastructure, advancing industrial network security, managing security operations, and coordinating incident response and automation.

Responsibilities:

• Deliver success through empowerment and accountability by modeling, coaching, and caring
• Direct team to address identified security strategy, ensuring proper team resources are available to accomplish goals, and coordinate with partner teams to remediate control failures
• Drive team to implement and manage new automation for greater efficiency in security operations while ensuring measurable business impact and solutions across the organization
• Escalate potential gaps in security policy, provide guidance on current security policies, recommend changes, and drive adoption for new policies
• Lead network security operations/engineering across firewalls, IDS/IPS, network infrastructure, cloud security, and identity services, ensuring platform reliability, policy compliance, telemetry coverage, operational readiness, and timely remediation of security risks
• Support end to end security breach protocol by guiding team in responding, investigating, communicating with stakeholders, resolving, and running post-mortem analysis for any security breaches. Coordinate with partner teams to secure data and maintain chain of custody
• Lead global security operations across Microsoft Sentinel and OT environments, driving 24×7 monitoring, detection engineering, threat hunting, incident response, automation, and regional coordination across AMER, EMEA, and APAC while measuring detection coverage, service-level attainment, MTTD, and MTTR
• Embody our culture and values

Requirements:

• Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
• OR Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
• OR Doctorate in Statistics, Mathematics, Computer Science, or related field
• OR equivalent experience
• 7+ years of experience in cyber security, and anomaly detection and response
• OR Doctorate in Statistics, Mathematics, Computer Science or related field
• 2+ years people management
• 1+ year(s) leading a security function (e.g., Security Operations Center [SOC], threat and vulnerability management [TVM], authentication and access management)
• 1+ year(s) leading multi-disciplinary team
• Experience owning/managing security service to internal or external customers
• CISSP, CISA, CISM, SANS, GCIA, GCIH, OSCP, and/or Security+ certification