Senior Security Engineer - Development

Lead security engineering for Microsoft’s Quantum Security & IT Operations (QSIT) team, focusing on automation, AI-assisted investigations, and detection engineering for network, infrastructure, and physical security services.

Responsibilities

• Implement AI-enabled SOC automation and investigation capabilities, including signal enrichment, workflow orchestration, and analyst tooling.
• Develop and operate security tooling, data integrations, dashboards, and supporting platforms to enable reliable day-to-day security operations.
• Tune detections and investigation workflows to improve signal quality, reduce false positives, shorten investigation time, and increase analyst productivity.
• Participate in incident investigation and response, maintain operational readiness, and troubleshoot security issues impacting network, infrastructure, and physical security services.
• Partner with engineering, facilities, networking, and security teams to automate manual processes, resolve operational issues, and strengthen end-to-end resilience.

Requirements

• Doctorate in Statistics, Mathematics, Computer Science, or related field (or equivalent via degree + experience).
• 2+ years of experience programming in C++, C#, Python, Scala, or similar technologies.
• Demonstrated experience coordinating incidents and supporting live services, including investigation, containment, recovery, escalation, triage, root-cause analysis, stakeholder communication, and operational readiness.
• Hands-on experience with Microsoft Sentinel (KQL) or an equivalent enterprise SIEM, including detection engineering, data onboarding, investigative analysis, and resolution of ambiguous, high-impact security issues.
• Hands-on experience with security automation and AI-assisted operational workflows using PowerShell, Python, Logic Apps, or similar technologies for signal enrichment, investigations, workflow orchestration, and decision support.
• Working knowledge of enterprise networking, including DNS, TCP/IP, firewalls, routing, VPNs, and network troubleshooting.
• Experience working with SOC and NOC.
• Experience collaborating with corporate insider threat, investigations, legal, or trade compliance functions; exposure to insider threat platforms such as Purview, DTEX, Proofpoint ITM, Magnet Axiom, or Forcepoint.
• Experience designing, deploying, or evaluating agentic AI or LLM-based automation in a security operations context.
• Experience or interest in protecting strategic research programs from sustained external targeting; familiarity with export control (EAR / ITAR) and government program environments.
• Ability to meet Microsoft, customer and/or government security screening requirements, including passing the Microsoft Cloud Background Check upon hire/transfer and every two years thereafter.
• Citizenship & Citizenship Verification: provide proof of country of citizenship or proof of U.S. permanent residency or other protected status; citizenship verification with a valid passport (or other documents for lawful permanent residents, refugees, and asylees, where applicable).

Technologies

• C++, C#, Python, Scala
• Microsoft Sentinel, KQL
• PowerShell, Logic Apps

Additional / Preferred Qualifications

• Doctorate in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, or anomaly detection.
• OR Master’s Degree in Statistics, Mathematics, Computer Science, or related field AND 6+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, or anomaly detection.
• OR Bachelor’s Degree in Statistics, Mathematics, Computer Science, or related field AND 8+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, or anomaly detection.
• OR equivalent experience.
• CISSP, CISA, CISM, SANS, OSCP, Security.

Location: Redmond, WA (onsite)

Compensation: USD 119,800 - 261,000 per yearly

Minimum Experience: 2 years