Join Microsoft's cutting-edge Defender Experts Team and contribute to the fight against advanced cyber threats. This role involves leveraging deep security expertise and rich telemetry to detect, investigate, and respond to complex attacks. You will empower enterprises to secure their networks and data, ensuring they can swiftly counter human adversaries.

Your work will focus on harnessing Microsoft's vast security signals to identify emerging attacker behaviors, generate critical alerts, and develop innovative detection strategies. If you are passionate about staying ahead of threats and driving security advancements, this is your opportunity to make a significant impact.

Engage directly with senior customer security leaders, co-designing cloud detection and response innovations and ensuring high product satisfaction. Collaborate with your expert team to conduct in-depth threat research and analysis affecting customers. Work across engineering, marketing, and business teams to launch new global security services.

Investigate security incidents and researcher findings to build robust, scalable detection solutions. Foster new and enhance existing partnerships to mature Defender Experts services. Provide influential technical leadership in a dynamic environment.

A minimum of 7 years in a technical security role, including Security Operations, Threat Intelligence, or Cyber Incident Response. Possess at least 4 years of experience in people/service delivery management or customer-facing support. Proven experience leading security functions, such as a SOC manager or lead security engineer, is essential.

Demonstrate in-depth knowledge of operating system internals and attack vectors across Windows, Linux, Mac, Android, and iOS. Proficiency in data analysis and cyber threat investigations within Sentinel is required. Familiarity with the kill-chain model, ATT&CK framework, and modern penetration testing is key.

Strong understanding of major cloud and productivity platforms, as well as identity systems and their security implications. Experience curating Threat Intelligence and delivering customer briefings is necessary. You must be adept at using data to communicate insights effectively.

Successful candidates must meet Microsoft, customer, and/or government security screening requirements, including the Microsoft Cloud Background Check. This role requires working from the office at least three days per week.