Security Operations Engineering IC4 @ Microsoft

• Investigate, analyze, and learn from security researchers, attackers, and incidents to develop durable detective controls across the kill-chain.
• Execute day to day threat hunting for targeted attacks against Highly Sensitive Environments.
• The ideal candidate will also add business value by applying data and analytics to support incidents, business priorities, and operational issues while identifying or building appropriate datasets to address future needs.
• Collaborate with partner service teams, PMs, and developers to improve detection capabilities.

Desired Skills :

• At least 3+ years of experience in building detective controls for Highly Sensitive Environments.
• Basic understanding of Software Supply chain components such as SBOM, 3rd party code, Code crafting and buildelease pipelines.
• Data-centric mindset, comfortable drawing together signals from multiple sources and platforms to infer attacker behavior.
• Passions for Threat hunting, Incident response, and remediation from compromise and data breach events.

• One or more of the following information security-related qualifications, demonstrable equivalent experience, or capability to obtain certifications: GCIH, GPEN, GWAPT, GDAT, GNFA, GCFA, OSCP
• Experience in developing services or scripts for automation of analysis, response, or forensics.
• Understand how data and analysis contributes to broader business goals, and draw informed conclusions based on incomplete or conflicting information.

The following would be an advantage:

• Previous experience performing Detection and Threat hunting within Cloud Service Provider (CSP) environments.
• Experience with Scripting in any language, AI, or ML.