Senior Security Operations Engineer

The Cloud & AI organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world. Microsoft is one of the largest enterprise service companies in the world. Security represents one of the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. The Office of the Chief Information Security Officer (CISO) is accountable for managing and prioritizing cybersecurity risks for Microsoft. This team oversees the company’s overall cyber defense, including the security of Microsoft products and business operations, and collaborates with Engineering teams to advance Secure Future Initiative (SFI) objectives.  Security is a core priority for Microsoft, and Identity and Access Management protections are essential to protecting Microsoft at global scale. We are looking for a Senior Security Operations Engineer with deep expertise in tenant management and identity security to drive security operations, incident response, and large-scale remediation across Microsoft’s identity ecosystem. This role combines strong technical expertise with data-driven security operations to identify systemic risks, lead security and incident campaigns, strengthen tenant protections, and partner with engineering teams to deliver scalable and durable security improvements.

Serve as a technical subject matter expert for enterprise tenant and identity security, applying deep knowledge of tenant architecture, configuration, identity controls, authentication, authorization, application identities, service principals, privileged access, and identity lifecycle management. Identify and drive remediation of systemic security risks across tenant and identity environments, connecting individual findings and incidents to broader patterns and developing scalable approaches to address them. Lead complex identity and tenant security campaigns end-to-end, including problem discovery, technical scoping, risk assessment, investigation, prioritization, engineering remediation, validation, and closure. Lead technical investigations of identity and tenant security incidents, determining root cause and impact and driving containment, remediation, and preventative actions across affected environments. Partner deeply with Software Engineering teams to translate security risks into technical requirements and durable platform improvements, influencing engineering priorities and design decisions where necessary. Analyse tenant configuration, identity telemetry, security signals, and operational data to identify emerging risks, recurring issues, anomalous behaviour, and opportunities for proactive protection. Design and drive scalable security protections and remediation mechanisms that improve the ability to detect, prevent, and remediate tenant and identity risks across large-scale environments. Establish technical strategies for recurring security problems, moving beyond individual remediation to improve platform capabilities, automation, detection, protection, and operational resilience. Drive measurable security outcomes across multiple technical workstreams, maintaining ownership of risks, dependencies, exceptions, remediation commitments, and engineering outcomes through closure. Influence senior engineering and security stakeholders through technical expertise, data, and clear articulation of risk, trade-offs, and recommended solutions.

Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity, or