Apply now: https://jobs.careers.microsoft.com/global/en/job/1901119/Security-Operations-Engineer-II
Role: Security Operations Engineer II
Location: Hyderabad, Telangana, India
Experience: 8+ years (minimum 6 years in SOC)
Employment Type: Full-Time
Work Model: 3 days/week in-office
Job Overview
The Cyber Defense Operations (CDO) team at Microsoft, led by the Chief Information Security Officer (CISO), plays a pivotal role in safeguarding Microsoft’s global digital ecosystem.
As a Security Operations Engineer II, you will be responsible for incident response, threat hunting, forensic investigations, and security automation. This role demands a deep understanding of cyber threats, vulnerabilities, and cloud security (Azure) to strengthen Microsoft’s defense infrastructure.
Key Responsibilities
- Lead incident response and threat hunting activities across enterprise systems.
- Analyze security events and develop actionable countermeasures.
- Conduct root cause analysis, forensic investigations, and post-incident reviews.
- Maintain and enhance SIEM tools (Sentinel, Splunk, QRadar, etc.).
- Develop and tune detection rules and alerts to improve threat visibility.
- Create and maintain incident response playbooks and SOPs.
- Collaborate with IT, DevOps, and cloud teams to remediate vulnerabilities.
- Provide technical insight for improving Microsoft’s internal security products.
- Identify automation opportunities to streamline SOC operations.
- Handle stakeholder communication during high-severity incidents.
Qualifications
Required:
- 8+ years of overall IT/security experience, with at least 6 years in SOC operations.
- 4+ years of experience in Azure or Cloud security.
- Strong knowledge of Windows, Linux, and Mac OS internals.
- Hands-on experience in incident analysis, threat mitigation, and forensics.
- Proficiency in KQL queries and scripting (Perl, PHP, or Python).
- Experience with DLP, AV, FIM, web/email proxy tools.
- Familiarity with MITRE ATT&CK, SOAR tools, and Threat Intelligence platforms.
Preferred:
- Security certifications such as GCIH, GCFA, GREM, or CySA+.
- Strong communication, troubleshooting, and leadership skills.
About Microsoft
Microsoft’s mission is to empower every person and organization to achieve more.
Through its Cyber Defense Operations, the company ensures all systems and services remain protected, resilient, and secure against evolving digital threats.
Benefits
- Industry-leading healthcare and wellness benefits
- Learning and development programs
- Parental leave and generous time off
- Savings and investment plans
- Employee discounts and networking opportunities
Disclaimer
This job information is shared for educational and awareness purposes only. Candidates should apply directly through the official Microsoft careers website to ensure authenticity.