Service Engineer II

Are you looking for a challenge that puts you at the centre of the Microsoft Edge + Platform, Devices and Gaming Security strategy? Are you passionate about solving the security challenges of critical online services? Microsoft's EDG Security (Edge + Platform, Devices and Gaming) is responsible for some of Microsoft's largest and most important online services including the Xbox LIVE, Microsoft Game Studios, and more. The EDG Security MRI (Monitoring, Response and Investigations) team is looking for a Service Engineer who can help run a world-class SIEM solution and make it better. We collect security telemetry from various mission critical Microsoft services and detect anomalous activities for our analysts to respond to. This role enables us to partner with various product groups like Azure Defender, Defender for Endpoint, Microsoft Cloud App Security, Sentinel etc. to build a stronger defence shield to protect our customers.
Our ideal candidate is:

• Self-Driven, willing to take challenges in Azure Security Monitoring Domain
• Passionate about Data, Parsing, Analysis, Cyber Security
• Possess a DevOps mindset
• Strong team player & Collaboration skills

ResponsibilitiesResponsibilities:

• Strengthening and architecting security monitoring for on-prem and cloud assets, including onboarding IaaS, PaaS, and VM Scale Sets and other azure non-compute resources.
• Engineer (Identify, Implement, and Improve) the health of the Data Collection/Monitoring and the Alerting components.
• Manage the health of the monitoring platform to ensure the coverage and completeness of network and host instrumentation.
• Coordinate with customers/partners for deployments and upgrades based on the change management policies.
• Serve as a subject matter expert for Security platforms by providing consultative assistance to Analysts/Engineers/Pen Testers
• Serve as a strategic design partner for Microsoft security Product groups.

Qualifications Required Qualifications:

• A minimum of 5 years of experience in designing, implementing and operating services on Azure.
• Must be strong in Windows Server fundamentals (administration, including Active Directory (AD) and Group Policy (GPO)).
• Experience in data pipeline management and managing live-site for enterprise level services.
• Other Considerations (the candidate must demonstrate strong technical expertise in one or more of the following areas):
  • Designing, writing, and debugging programs in interpreted or compiled languages such as: .NET, C++, C#, PowerShell, BASH, or Python is a plus.
  • Experience in any of the Big Data Technologies like Logstash, Kafka, Event Hub, Azure Data explorer would be highly valued.
  • Experience with SIEM Product Engineering is a big plus.
  • ** Important: Experience operating a high complexity cloud-based service at enterprise level.
  • This position requires On-Call availability on a rotational basis.
• Additional background checks may be required.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the Accommodation request form .
Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.