Incident Response Engineer - CIRT

1 Month ago • 7 Years + • Cyber Security

Job Summary

Job Description

As a Senior Incident Response Engineer in Microsoft's Customer Service & Support (CSS) team, you'll be a key member of a customer-facing security support team. Responsibilities include leading incident response investigations for enterprise customers, analyzing and triaging security incidents, containing threats, providing remediation guidance, and determining root causes. You'll work with threat analytics tools, collaborate with security teams, and develop incident response runbooks. The role requires experience in cloud investigations (Entra ID, Microsoft 365, Defender), network security administration, and system administration (Windows Server, Client, Active Directory). You'll need expertise in Azure Identity management, Kusto Query Language, and automation (PowerShell/Python). This is a fully remote role.
Must have:
  • 5+ years experience or Bachelor's degree + 2 years experience
  • 2+ years Security Incident Response experience
  • 2+ years Cloud investigations experience
  • Experience with Microsoft Defender solutions
  • Kusto Query Language knowledge
Good to have:
  • Linux/Mac administration
  • IT Certifications (Microsoft, SANS GCIH, CISSP, etc.)
  • PowerShell and/or Python
  • Bachelor's degree in technical field

Job Details

Overview

With over 17,000 employees worldwide, the mission of the Customer Experience & Success (CE&S) organization is to empower customers to accelerate business value through differentiated customer experiences that leverage Microsoft’s products and services, ignited by our people and culture. Come join CE&S and help us build a future where customers achieve their business outcomes faster with technology that does more.

 

Within CE&S, the Customer Service & Support (CSS) organization builds trust and confidence for every person and organization through delivering a seamless support experience. In CSS, we are powered by Microsoft’s AI technology to help consumers, businesses, partners, and more, resolve their issues quickly and securely, helping prevent future problems from occurring and achieving more from their Microsoft investment.


As a Senior Incident Response engineer, you will be an elite member of a customer facing security support team leading incident response investigations for Microsoft’s enterprise customers. You have experience in analysing, triaging, scoping, containing, providing guidance for remediation, and determining the root cause of security incidents. You are familiar with collecting and analysing security incident related data to identify indicators of attack and compromise.

 

In the Customer Service & Support (CSS) team we are looking for people with a passion for delivering customer success. As a Senior Incident Response Engineer you will own, troubleshoot and solve highly complex customer technical issues. This opportunity will allow you to accelerate your career growth by honing your problem-solving, collaboration and research skills, and developing your technical proficiency.

 

This role is flexible in that you can work up to 100% from home.


Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

 

Qualifications

Required Qualifications:
• Bachelor's degree in Computer Science, Information Technology (IT), or related field AND 5+ years of technical support, technical consulting experience, or information technology experience 
     o OR 7+ years of technical support, technical consulting experience, or information technology experience. 
     o OR equivalent experience
 
 
• Minimum 2+ years Security Incident Response experience with recent operational security experience (SOC, Malware Analysis, IDS/IPS Analysis, threat analytics, windows server, and endpoint security, etc.)
• Minimum 2+ years Cloud investigations experience with Entra ID, Microsoft 365 and Microsoft Defender solutions
• Minimum 2 years customer facing experience
• Experience supporting large and complex geographically distributed enterprise environments with 1000+ users
• Minimum 1+ years of experience in Network Security Administration, and/or Systems Administration with experience in Windows Server, Windows Client, and Active Directory Administration
 
• Experience in Entra ID and Microsoft 365 management and troubleshooting
• Experience with any Microsoft Defender solutions
• Experience in Azure Identity management and troubleshooting
• Kusto Query Language knowledge
• Cloud experience with any of the major cloud providers, including cloud security, networking, and migration of multi-cloud or hybrid deployments
• Automation (PowerShell and/or Python, Java, or a similar language, can be a beginner to intermediate level).
• Preferred IT Industry certifications (Microsoft Certifications On-Prem or Cloud, SANS GCIH, CISSP, CEH, Amazon AWS, etc.)
• Preferred Bachelor’s degree or higher in a technical field, or relevant work experience
Experience in Linux and/or Mac administration
 
 
Ability to meet Microsoft, customer and / or government security screening requirements are required for this role.  These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud Background Check upon hire / transfer and every two years thereafter.
 

Responsibilities

• Scope customer security incidents
• Understand and identify indicators of attack and indicators of compromise
• Analyse incident data from threat analytics tools
• Collaborate with the Security and Threat Intelligence teams by providing indicators of compromise and samples of malware from the customer’s environment
• Coordinate a response to the security incident with other Microsoft security and consulting teams.
• Develop, document, and implement runbooks, capabilities, and techniques for Incident Response
• Perform security triage and analysis on endpoint, server and network infrastructure.
• Perform activities necessary for immediate containment and short-term resolution of incidents.
• Maintain current knowledge and understanding of the threat landscape, emerging security threats, and vulnerabilities
• Investigate root cause of complex security incidents
• Maintain a high level of confidentiality
* Participate in the on-call rotation as required

Similar Jobs

Internet Brands - Lead Data Engineer

Internet Brands

El Segundo, California, United States (Hybrid)
3 Months ago
Saviynt - Technical Lead, Field Engineering

Saviynt

Bengaluru, Karnataka, India (Hybrid)
7 Months ago
Perplexity AI - Backend Software Engineer - Search

Perplexity AI

Belgrade, Serbia (On-Site)
2 Weeks ago
Capgemini - Selenium Java

Capgemini

Gurugram, Haryana, India (On-Site)
3 Weeks ago
luxsoft - Senior Cobol Developer

luxsoft

Bengaluru, Karnataka, India (On-Site)
1 Week ago
bytedance - Head of Cloud Security Product Manager, APAC

bytedance

Singapore (On-Site)
2 Months ago
PwC - Cybersecurity Threat & Vulnerability | Manager | Cyber Security | Technology Consulting

PwC

Dublin, County Dublin, Ireland (On-Site)
7 Months ago
PwC - Assurance Technology Risk & Quality Manager

PwC

Dublin, County Dublin, Ireland (On-Site)
7 Months ago
PwC - Identity & Access Management Engineer PwC Netherlands

PwC

Amsterdam, North Holland, Netherlands (Hybrid)
4 Months ago
NVIDIA - Senior Intellectual Property Security Engineer

NVIDIA

Santa Clara, California, United States (Hybrid)
1 Month ago

Get notifed when new similar jobs are uploaded

Similar Skill Jobs

DISCO - Engineering Manager , Feature

DISCO

Gurugram, Haryana, India (On-Site)
7 Months ago
Trendyol - Backend Developer

Trendyol

İzmir, İzmir, Türkiye (Hybrid)
7 Months ago
Adglobe - System Engineer

Adglobe

Shibuya, Tokyo, Japan (On-Site)
7 Months ago
Synechron - Java Developer (Spring & RESTful Web Services Expert)

Synechron

Hyderabad, Telangana, India (On-Site)
1 Week ago
Wrike - Senior Backend Engineer

Wrike

Nicosia, Nicosia, Cyprus (Hybrid)
1 Month ago
Aspire - Lead Backend Engineer

Aspire

Bengaluru, Karnataka, India (Hybrid)
2 Weeks ago
Next Level Business Services - Full Stack Java Developer

Next Level Business Services

Boston, Massachusetts, United States (On-Site)
7 Months ago
Wind River - Senior Engineer - Java Programmer - Application Support

Wind River

Bengaluru, Karnataka, India (Hybrid)
1 Month ago
CME Group - Generative AI Engineer

CME Group

Chicago, Illinois, United States (Hybrid)
1 Month ago
Britive - Software Engineer

Britive

Bengaluru, Karnataka, India (On-Site)
1 Week ago

Get notifed when new similar jobs are uploaded

Jobs in Sydney, New South Wales, Australia

Canva - Staff Backend Engineer - Product Insights Enablement - Java

Canva

Melbourne, Victoria, Australia (Remote)
2 Months ago
sitecore - Customer Success Manager

sitecore

Sydney, New South Wales, Australia (On-Site)
1 Month ago
Marsh McLennan - Senior Account Executive - Corporate Broking

Marsh McLennan

Darwin, Northern Territory, Australia (Hybrid)
5 Days ago
Telastra - Telstra Retail: Full Time Customer Service & Sales Consultant ICON SYDNEY

Telastra

Sydney, New South Wales, Australia (On-Site)
1 Week ago
Unbroken Studios - Technical Director, Transport - SEQ (Design Management)

Unbroken Studios

Fortitude Valley, Queensland, Australia (Hybrid)
2 Weeks ago
Accurate - Account Executive

Accurate

Australia (Remote)
3 Months ago
Canva - Staff Technical Program Manager - Platform Org

Canva

Sydney, New South Wales, Australia (Remote)
1 Month ago
Telastra - Telstra Retail: Customer Service & Sales Consultant

Telastra

South Hedland, Western Australia, Australia (On-Site)
1 Week ago
Canva - Senior Frontend Engineer - Growth

Canva

Surry Hills, New South Wales, Australia (Remote)
2 Months ago
The Walt Disney Company - Senior Paint & Roto Artist

The Walt Disney Company

Sydney, New South Wales, Australia (On-Site)
6 Months ago

Get notifed when new similar jobs are uploaded

Cyber Security Jobs

Windranger Labs - Security Engineer

Windranger Labs

Apac, Northern Region, Uganda (Remote)
2 Months ago
Google - Cyber Engagement Lead

Google

Tokyo, Japan (On-Site)
1 Month ago
PwC - Consultant expérimenté cybersécurité | CDI | H/F

PwC

Neuilly-sur-Seine, Île-de-France, France (On-Site)
8 Months ago
PwC - IN-Senior Associate_ Java/IT _Utility transformation _Advisory_MUMBAI

PwC

Mumbai, Maharashtra, India (On-Site)
7 Months ago
Optiv - End Game - Sr. Engineer | Onsite, Bangalore

Optiv

Bengaluru, Karnataka, India (On-Site)
10 Months ago
PwC - Manager - Assurance - IT Audit

PwC

Jakarta, Jakarta, Indonesia (On-Site)
8 Months ago
PwC - Financial Sector Cyber Security Strategy Manager

PwC

Amsterdam, North Holland, Netherlands (Hybrid)
4 Months ago
PwC - 1-10yrs Application for Cyber- Kolkata DN 57 - RDC

PwC

Kolkata, West Bengal, India (On-Site)
8 Months ago
Saviynt - Sr. Principal Software Engineer - Privileged Access Management (PAM)

Saviynt

El Segundo, California, United States (Hybrid)
7 Months ago
PwC - Workday - Senior Consultant-  Bangalore

PwC

Bengaluru, Karnataka, India (On-Site)
8 Months ago

Get notifed when new similar jobs are uploaded

About The Company

Vancouver, British Columbia, Canada (On-Site)

Mountain View, California, United States (Hybrid)

Shenzhen, Guangdong Province, China (On-Site)

Noida, Uttar Pradesh, India (On-Site)

Redmond, Washington, United States (On-Site)

Paris, Île-de-France, France (On-Site)

View All Jobs

Get notified when new jobs are added by Microsoft

Level Up Your Career in Game Development!

Transform Your Passion into Profession with Our Comprehensive Courses for Aspiring Game Developers.

Job Common Plug