Technical Program Manager - Security

Does protecting over 1 billion customers and making the cyber world a better place sound exciting? Do you have what it takes to be part of one of the world's most crucial security monitoring and detection team? Do you want to innovate and improve how Microsoft transforms learnings from OT/ICS Intel & incidents into actionable detection and automated process? This may be the opportunity for you. Cloud Data Center Cybersecurity (Cloud DC2) seeks motivated, experienced security professionals to join our team. We design and build security monitoring and detection solution to protect millions of devices in IoT & industrial networks around the globe and is part of Azure security services for IoT.
The successful candidate will work as part of a team that streamlines security data collection and alerts to deliver actionable insights for our monitoring team and partners with engineering teams across the company to improve security for Microsoft and our customers.
CDC2, Microsoft's IoT and OT security monitoring and detection team, recruit experienced threat monitoring and detection analysts with highly honed threat intelligence analysis skills.
We are responsible for researching and monitoring threats focused on IoT and OT devices and networks, tracking them, and following any lead to uncovering them across Microsoft Datacenter globally. We are responsible for building advanced security solutions to protect IoT & OT devices globally.
We are looking for passionate and experienced security analyst to join our team.ResponsibilitiesYou will take part in hands-on security research, including:

• Collect, understand, and prioritize researcher pain points and requirements across all phases of the research lifecycle, from exploratory prototyping, to delivering protection in production, and ongoing quality assessment of product capabilities.
• Work with research and engineering leaders across Microsoft to continually shape and implement a multi-year vision for research enablement platform and capabilities.
• Own and design the researcher enablement scorecard that tracks progress against vision, goals, and current progress. Present status, challenges, and highlights to senior leadership.
• Leverage results as part of the external communication story, shaping both customer and analyst perception based on state-of-the-art capabilities.
• Drive and own strategy for security monitoring
• Design and develop security detection
• Hunt and reverse engineer IoT/OT malware is preferred but not required.

• Study IoT/OT devices, including reverse engineering is preferred but not required.
• Design new techniques for hunting IoT/OT malware
• Researching online for the latest security threats
• Collaboration with other security groups to identify the latest threats and attack vectors
• Writing blogs, publications and presenting in global cyber security conferences
• Write proof of concepts, detections, and other recommendation algorithms when relevant

The ideal candidate will demonstrate:

• Planning and Execution: Ability to think holistically and strategically. Proven ability to plan, organize, and manage complex technical projects.
• Communication: Conceptualize complex ideas quickly and convey those thoughts to others in a clear, effective, and motivating manner. Able to conduct insightful, multi-faceted conversations with senior leadership and decision makers.
• Collaboration: Experienced collaborator able to work effectively across broad teams and influence stakeholders of all levels and of all disciplines across Microsoft.
• Microsoft Values: As a principal member of the Microsoft Defender team, candidates must be excellent representatives of the Microsoft cultural attributes and leadership principles.
• Judgement: Excellent product and technical judgment via consistent demonstration of maturity and intellectual curiosity to help the team pursue the best ideas.

QualificationsRequired Qualifications:

• 7+ years of experience as a Security Program Management & Researcher - MUST
• Hands-on experience in Power BI, Dashboard and software development (Python)
• Team player, confident, independent and enthusiastic!
• Proven track record of innovative cyber security research
• Experience with data/security analysis - advantage
• Proven leadership capabilities via 7+ years of program manager or equivalent experience
• Excellent interpersonal skills and effective written/verbal communication skills, with experience presenting to C-level audiences
• Experience working with Enterprise customers and preferably have shipped Enterprise products or features
• Knowledge of kill-chain model, ATT&CK framework, and modern Redteam techniques.
• Experience in the computer security field having worked on enterprise security products, incident response, or collaboration with SOC teams
• Passion for conducting "practical" research - delivering constant value to our valuable customers

Preferred Qualifications:

• Previous experience in semiconductor supply chain and/or hardware security.
• Experience working on or leading complex, cross-company / cross-industry initiatives.
• Previous experience in cloud-scale services, leading cross-functional programs from concept to production.
• Team player, confident, independent and enthusiastic!
• Proven track record of innovative cyber security research
• Experience with data/security analysis - advantage
• Passion for conducting "practical" research - delivering constant value to our valuable customers
• Impeccable attention to detail and focus on execution.

Growth Mindset - a desire to learn, improve, and show persistence in the face of setbacks
#AzureSecCSS
#AzureSecOpen
#MSFTSecurity
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings:
Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the Accommodation request form .
Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.