Live chat
Microsoft Corporation

Security Engineer

Microsoft Corporation - Redmond, WA

Job Information

Microsoft Corporation

Security Engineer

in

Redmond

Washington

Cloud Operations and Innovation (CO I) is the engine that powers Microsoft's cloud services. The team is responsible for designing, building and operating our unified global datacenters; managing the demand planning and capacity utilization of our unified infrastructure; and responsible for all of the operations needed to run the physical infrastructure (including supply chain, hardware, power, security, and workflow teams). We focus on smart growth with an emphasis on automation, data driven engineering, cost-effectiveness, and environmental sustainability.

We deliver the core infrastructure and foundational technologies for Microsoft's over 200 online businesses including Bing, MSN, Office 365, Xbox Live, Skype, OneDrive and the Microsoft Azure platform. Our infrastructure is comprised of a large global portfolio of more than 100 datacenters and over 1 million servers. Our portfolio is built and managed by a team of subject matter experts working 24x7x365 to support services for more than 1 billion customers and 20 million businesses in over 90 countries worldwide.

This core infrastructure is a target for cyber criminals, hacktivists, and nation-state adversaries that seek to bring harm to our businesses, customers, and staff. Holding the line against them these threats is the Datacenter Cyber Defense and Industrial Networking team! We are Microsoft’s industrial strength security team!

With a focus on safety, resiliency, and recovery the Datacenter Cyber Defense and Industrial Networking team is responsible for fielding and operating our datacenters cyber security systems, controls and processes that protect and defend Microsoft’s datacenters operational technologies (OT), industrial scenarios, and other mission critical infrastructures from cyber threats.

In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.

Responsibilities

The Datacenter Cyber Defense and Industrial networking team is seeking a motivated, talented, and cyber security focused Senior Security Engineer to join our team! This role works collaboratively across a larger engineering team managing the structure, deliverables, timelines, and prioritization for designing, delivering, automating, securing, and providing operational support for critical industrial networking programs, services and projects in existing and future datacenters.

The cloud business is booming, that means datacenter activities and growth is booming! Our datacenters work 24 hours a day, 7 days a week, 365 days a year – so our programs and services must too be designed, built, and operated in such a way to support that growth and execution model. You will work within the Cloud Operations and Innovation engineering teams as well as partner across external teams handling datacenter engineering, support teams, design and build teams, and key decision makers across CO I division.

Partnering closely with the peer engineering organizations your role will be to design and deploy security solutions and manage them in a true DevOps fashion. You will be required to possess deep technical skills in Security and drive projects with heavy reliance on key partnerships with global datacenter operations teams and functions at varying levels of the business, teams responsible for the design and delivery of datacenters, Azure network engineering and architecture teams, and all groups affiliated with Microsoft Datacenters (Business & Property groups).

The candidate must possess strong written and verbal communication skills with an ability to speak and present effectively to all levels of business and be willing to jump into any situation to help provide design, support and troubleshoot issues in a 24x7x365 engineering environment. A successful candidate should be able to execute following responsibilities:

Using existing systems, monitors existing controls against security requirements and drives resolution or escalates as needed. Finds opportunities to leverage and contribute to the internal Microsoft community.

Participate in on-call DRI rotation to support security services. Escalates issues appropriately for resolution.

Implements new automation as directed. Identifies issues with automation and escalates as needed. Executes on direction to evaluate and leverage existing automation where possible.

Upholds controls to enable enforcement of security policies and standards for the service and escalates potential departures from policy and standards appropriately. Learns security policy and standards. Shares learnings with others.

Works with internal and external parties as directed to push solutions to the environment to address specific threats.

Utilizing guidance and key operating procedures, analyzes specific aspects of attempted or successful efforts to compromise systems security. Escalates findings as appropriate within agreed response times. Develops ability to analyze independently and make recommendations.

Uses monitoring techniques to identify potential or actual intrusions. Analyzes alerts and escalates appropriately. Creates detections based on available data (e.g., Indicators of Compromise [IOC] and Tools Tactics Procedures [TTP]). Continues to drive automation of detection and response.

Under direction, analyzes trends in threats that inform prioritization for defense-building capabilities.

Qualifications

1 year(s) of experience in software development lifecycle, large-scale computing, modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), and operations incident response.

OR Bachelor's Degree in Statistics, Mathematics, Computer Science or related field.

Preferred or Additional Qualifications:

CISSP, CISA, CISM, SANS, GCIA, GCIH, OSCP, and/or Security certification.

Any experience in firewalls or intrusion detection systems.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the Accommodation request form (https://careers.microsoft.com/us/en/accommodationrequest) .

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to, the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

#COICareers

#COIEngCareers

#COISecCareers #STSS #CyberDefense #ISSE

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.

53 days 6 hours ago

Microsoft Corporation

apply

Security Engineer Microsoft Corporation - Redmond, WA, United States

   

Location: Redmond, WA