Senior Cloud Security Engineer

Microsoft is hiring a Senior Cloud Security Engineer for its Cloud Operations & Innovation organization. The role helps secure Microsoft datacenter infrastructure by implementing and operating cybersecurity controls, investigating threats, improving security automation, and partnering with internal and external teams.

Responsibilities:

• Proactively identify and investigate potential issues and patterns in security controls and drive mitigation strategies, while also implementing automation to improve efficiency and effectiveness across the network
• Install, upgrade, and maintain security hardware, operating system and software
• Identify gaps in security policy and administration, recommend solutions, and implement new and revised security standards, while working with partner teams to drive consistency and awareness
• Maintain standards and drive improvements for our customer and partner experience, responding appropriately to emerging issues and advocating for our customer experience through development and analyzation of key metrics, performance indicators, and other data sources (e.g. bugs, unhealthy data pipeline). Respond to escalations and recommend improvements as appropriate to address gaps
• Participate in on-call rotation to support security services
• With minimal guidance, analyze attempted or successful efforts to compromise systems security and, alongside partner teams, create recommendations to limit exposure, implement response plans, and take action
• Analyze potential or actual intrusions identified from monitoring activities and create detections based on available data (e.g., Indicators of Compromise [IOC] and Tools Tactics Procedures [TTP])

Requirements:

• Doctorate in Statistics, Mathematics, Computer Science, or related field OR Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 3+ years' experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
• OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years' experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
• OR equivalent experience
• Own the technical direction and multi-quarter roadmap for cloud and identity security, translating broader organizational objectives into clear priorities, actionable engineering plans, and measurable outcomes, while driving Zero Trust adoption and strong identity governance across IAM, privileged and conditional access, and workload identities
• Design, deploy, and operate cloud security controls including WAF, NSG, Azure Firewall, Defender for Cloud, PIM, Key Vault, and network isolation patterns, with minimal supervision
• Drive Infrastructure-as-Code and automation (Bicep, Terraform, PowerShell, Azure Policy) to enforce baselines, eliminate manual toil, and make cloud-security changes auditable and repeatable at fleet scale
• Investigate and resolve cloud-security incidents in your area of ownership, participate in the on-call rotation, and lead postmortems that convert findings into durable engineering improvements
• Cloud Security, architect, Azure, VNET, VWAN, Security Policy, IAM, Identity, PAM, Lead, Automation, Efficiency
• CISSP, CISA, CISM, SANS, GCIA, GCIH, OSCP, PCCSE, PCNSE, PCSAE, CCNP Security, CCIE Security and/or Security+ certification
• Any experience with industrial control systems is preferred (not mandatory)