Job Description

As cyber threats grow in scale and complexity, cloud security isn't just important, it's essential. At Microsoft, we're building secure, resilient platforms to protect our cloud environment and meet the highest standards of trust and assurance.


We're looking for a

Senior

Security Engineer - Cloud Security

to help us lead that future. Join our dynamic Regulated Industries team within the Cloud + AI division, where you will drive initiatives that embed security into the fabric of our cloud platforms while enabling rapid, automated detection and response capabilities. You will lead efforts in this hands-on engineering role to eliminate manual toil, build resilient security controls, and ensure our defenses can scale alongside the business. You'll be joining a team that operates at the bleeding edge of cloud and security, working across Azure and hybrid environments to protect Microsoft and its customers through innovation, collaboration, and engineering excellence.


Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.

Responsibilities

--------------------

Design and deploy advanced security controls and architectures across Azure and hybrid cloud environments. Lead the design of secure, scalable, and resilient systems, influencing decisions across networking, identity, compute, and data boundaries. Develop automation pipelines for detection, response, and remediation using tools like Azure Sentinel, Logic Apps, Defender for Cloud, Microsoft Graph, and custom scripting. Investigate security incidents, help contain threats, and provide technical support for high-impact response efforts. Build scalable integrations with Microsoft security stack to improve visibility, containment, and incident response. Collaborate with threat detection teams to operationalize detection-as-code, security playbooks, and custom analytic rules aligned to MITRE ATT&CK. Partner with engineering, platform, and devops teams to embed security guardrails into CI/CD and cloud workflows. Serve as a technical advisor and mentor to security engineers, sharing best practices for automation and secure-by-design patterns. Contribute to internal frameworks, reusable modules, and open-source tooling that improve cloud security maturity across the org. Develop and integrate machine learning models and AI agents for anomaly detection, behavioral analytics, policy drift detection, alert triage, and security decision support. Track emerging threats, evolving compliance landscapes, and Microsoft's latest security innovations and turn that insight into action.

Qualifications

------------------

Required Qualifications:

8+ years of experience in security engineering or platform architecture, with 4+ years focused on cloud security in Azure, AWS, or GCP. Deep, hands-on expertise with Microsoft Azure; including AKS, App Services, Key Vault, Managed Identities, API Management and Azure Policy. Advanced proficiency in Python, PowerShell, Kusto/KQL and the ability to design and build tooling that scales across environments and teams. Experience with AI/ML in security contexts, such as anomaly detection, predictive modeling, or triaging security signals using large datasets. Strong communication skills so you can speak both engineer and executive fluently.

Preferred Qualifications:

Hands-on experience with Microsoft Defender for Cloud, Azure Monitor, Sentinel, or Purview. Strong experience building automated solutions for vulnerability management, threat detection, and security configuration drift. Fluency in cloud architecture patterns for multi-region, multi-tenant, and compliance-bound workloads (PCI, HIPAA, HITRUST) Security certifications such as CCSP, GCSA, AZ-305, DP-100 or equivalent.



Microsoft is an equal opportunity employer. Consistent with applicable law, all qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.