Principal Security Operations Engineer

Overview

As Principal Security Engineer at Microsoft, you lead the design, build, and operation of security capabilities across network, identity, infrastructure, cloud, and AI environments. You enable engineering velocity by delivering scalable security controls, monitoring, and automation. You collaborate with engineering teams to enhance visibility, threat detection, and risk reduction at scale. This role offers the opportunity to shape security for large cloud and AI systems and influence cross-organizational security engineering. You work in a growth-oriented, inclusive culture focused on responsible security and innovation.

Responsibilities

• Design, build, deploy, and operate security capabilities across network, identity, infrastructure, cloud, and AI environments
• Develop scalable solutions to improve security posture, visibility, and resilience
• Implement and continuously improve monitoring, telemetry, detection, and response capabilities
• Engineer solutions that collect, enrich, correlate, and analyze security signals from multiple systems
• Develop detections, analytics, automation, and investigation workflows for various security incidents
• Build security services, tooling, APIs, data pipelines, and operational capabilities to reduce manual effort
• Secure environments by implementing controls, conducting threat modeling, and reducing risk through engineering improvements
• Investigate complex security events, translate findings into new controls and automation
• Apply AI, ML, and agentic technologies to improve monitoring, investigations, and response
• Develop monitoring and protection capabilities for AI infrastructure and related systems

Key requirements

• Degree in Computer Science, Cybersecurity, Engineering, Mathematics, Statistics, or related field, or equivalent practical experience
• Experience in security engineering, infrastructure/cloud/software engineering or related technical disciplines
• Experience building, deploying, or operating security controls, monitoring systems, or automation solutions
• Experience with security telemetry, threat detection, incident investigation, security analytics, automation, scripting, or large-scale distributed systems

• collaboration
• problem solving
• clear communication
• security telemetry
• threat detection
• automation

…