Security Operations Engineer II at Microsoft

Redmond, Washington, United States -

Full Time

Start Date

Immediate

Expiry Date

16 Apr, 26

Salary

199000.0

Posted On

16 Jan, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Automation, Artificial Intelligence, Security Policy, Azure, Cyber Security, Threat Analytics, Incident Response, Software Development, Data Analysis, Collaboration, Security Standards, Risk Management, Metrics Analysis, Programming, Cloud Computing, Security Operations

Industry

Software Development

Description

Overview Microsoft 365 continues to experience incredible growth as the company focuses on its productivity cloud strategy and enabling secure remote work for its customers. As part of Microsoft Engineering, The FastTrack team has a primary role driving this strategy and is looking for individuals that share in the passion to drive business value and customer success using Microsoft 365 and related technologies. To successfully deliver this, FastTrack is constantly pursuing new ideas and approaches to engage with our customers to get them to work smarter, faster, and more securely every day. The Microsoft 365 FastTrack Security and Privacy team builds and manages the common infrastructure that is used across FastTrack in partnership with the teams that develop on and utilize the infrastructure. This team operates in a global model. This is an exciting opportunity for a Security Operations Engineer to be part of this team. Location: By applying to this U.S. based position, while remote work is possible, relocation does not apply/is not provided for the role. Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. Responsibilities Leverages or builds automation to improve effectiveness and efficiencies of security operations with minimal supervision. Supports the development and/or implementation of automated and artificial intelligence (AI) solutions that minimize and/or resolve security incidents. Contributes to the utilization of automation and AI to identify and suggest improvements to products, services, and solutions. Serves as a resource on basic automation and AI knowledge around security. Begins to identify opportunities to contribute to intellectual property (e.g., bugs, missing features) for products, services, and solutions. Supports the development and implementation of security policy and standards across teams and services. Assesses security policy and standards to identify gaps and contributes to the development of strategies to drive improvements new controls. Follows security policy and standards. Engages with others (e.g., business partners, peers, industry) on security policies and standards with minimal guidance. Stay relevant with emerging Azure and AI features including risk and security principles. Communicates with internal and external stakeholders to identify and propose solutions to the environment to address risks and threats. Contributes to collaboration with internal and external parties to ensure service level agreement (SLAs) are reached when addressing risks and threats. Contributes to collaboration within team to ensure alignment with contractual requirements when addressing incidents. Proactively gathers requirements from customers and helps to define new feature sets and/or solutions to address issues and prevent reoccurrence with minimal guidance. Ensure accuracy and comprehensiveness in security policy, and design mitigation strategies or compensating controls for identified gaps. Collaborate with internal and external parties to ensure service level agreements are reached when addressing threats. Contributes to the analysis of key metrics, key performance indicators (KPIs), and other data sources (e.g., bugs, unhealthy data pipeline) to identify trends in security issues. Participates in identifying data requirements and gaps in measurement and implements mitigation strategies or compensating controls to close gaps. Leverages findings to take action on priority issues. Evaluates current analytical technologies and tools with minimal guidance and shares feedback within team. Partner with engineering, program management and operations personnel within the FastTrack organization implementing secure infrastructure improvements to processes and technologies. Qualifications Required Qualifications: Bachelor's Degree in Computer Science, or related technical discipline with proven experience coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience. Other Requirements: Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter. Preffered Qualifications: 4+ years of experience in one ore more; Azure infrastructure, software development lifecycle, large-scale computing, modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), and operations incident response 5+ years of experience in software development lifecycle, large-scale computing, modeling, cyber security, and anomaly detection CISSP, CISA, CISM, SANS, GCIA, GCIH, OSCP, and/or Security+ certification. Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 1+ year(s) experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 2+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response Security Operations Engineering IC3 - The typical base pay range for this role across the U.S. is USD $100,600 - $199,000 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $131,400 - $215,400 per year. Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Responsibilities

The Security Operations Engineer will leverage automation to enhance security operations and support the development of security policies and standards. They will also communicate with stakeholders to address risks and contribute to the analysis of security metrics.