We are seeking a highly skilled Cybersecurity Infrastructure Engineer to join our team at Microsoft. As a key member of our Detection and Response Team, you will play a critical role in empowering organizations to combat cyber threats through intelligence-driven investigation and strategic mitigation.

• Assist top customers with adversary containment and recovery efforts across multiple workstreams.
• Deploy forensic collection tooling across a wide range of complex environments.
• Identify potential threats and provide recommendations to improve cybersecurity posture.
• Perform knowledge transfer to prepare customers to defend against today's threat landscape.
• Research and analyze security threats and response capabilities, sharing across the team.
• Develop and document new solutions to mitigate security issues.
• Lead efforts to clean, structure, and standardize data and data sources.

• Degree in Statistics, Mathematics, Computer Science or related field OR experience in software development lifecycle, large-scale computing, modeling, cybersecurity, and/or anomaly detection.
• In-depth knowledge of one or more of the following disciplines: Threat Actor containment, Active Directory, Entra ID, Azure Resource Management, query languages, large-scale orchestration, and Microsoft Defender suite.
• Strong knowledge of at least two or more of the following products in the Microsoft Defender suite.
• Experience with PowerShell and bash scripting, third-party security products, Microsoft Public Key Infrastructure (PKI) implementations, Active Directory Federation Services (AD FS), Linux and MacOS platforms, and DevOps concepts.

Microsoft is an equal opportunity employer. We are committed to creating a diverse and inclusive work environment that values and respects the contributions of all employees. If you need assistance and/or a reasonable accommodation due to a disability during the application process, please let us know.