Security Engineer I

The Digital Security and Resilience (DSR) team is looking for a motivated Security Engineer I to be a part of the Cyber Security Operations Center.

In this role you will have the opportunity to work on cybersecurity issues as part of a dynamic and high-impact team. We use advanced security technologies, extensive automation and procedures to protect, detect and respond to security threats in real-time. In addition to day to day responsibilities, you will inform security initiatives across the company. You will analyze, contain and mitigate threats and escalations from multiple sources, both internal and external. You will be building and tuning a wide variety of advanced security detections, conducting detailed and comprehensive investigation and driving issues to closure. You will also contribute to developing innovative automation and orchestration solutions for detection and response. As part of the job, you will collaborate with security partners and Microsoft security product groups to improve our security posture.

The candidate will have experience in a team environment, experience with security operations and technical depth in information security domains like authentication, incident response, security monitoring or threat intelligence. In addition, this position requires an individual who thrives in high volume, highly collaborative setting.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.

Responsibilities

• Detect and respond to advanced threats, actor techniques, anomalous or suspicious activity, combined with intelligence, to identify potential and active risks to systems and data.
• Conduct detailed comprehensive triage and investigation on a wide variety of security events and implement containment and mitigation processes.
• Collaborate with internal security partners and threat intelligence teams to derive indications and warnings of impending threat.
• Build, deploy, tune scalable systems that automate security event detection, response and repeatable tasks through technical solutions and new security tools.
• Work with analysts and engineers by observing gaps and opportunities to provide efficiencies in detection and response.
• Keep up to date on emerging vulnerability, response, mitigation, threat landscape trends and use this knowledge to drive proactive threat monitoring.
• Participate in creating innovative ways to use a wide range of security event data to advance detection methods.
• Use security business intelligence to drive prioritization and improvements within Microsoft security programs.
• Should have solid verbal and written communication skills; ability to communicate effectively and clearly to both technical and non-technical staff.
• Demonstrated enthusiasm for learning new things and ability to pick up new ideas quickly.
• We handle active security events and respond to threats from a variety of sources, you will be required to participate in shift and on call rotation.

• Embody our Culture and Values

Qualifications

Required/Minimum Qualifications

• 1+ year(s) of experience in software development lifecycle, large-scale computing, modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), and operations incident response.
  • OR Bachelor's Degree in Statistics, Mathematics, Computer Science or related field.
• 1+ years of hands-on experience in security operations, threat detection and analysis, and/or incident response.
• 1+ years of professional software development life-cycle experience in one of the following - C#, JavaScript or Python.

Other Requirements 

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: 

Micros