MicrosoftEmployer profile
Software Engineering IC3
Location not specified · 8–10 yrs
Experience
- 8–10 yrs
Salary
- Not disclosed
Location
- Location not specified
Work mode
- Not specified
Job type
- Full-time
Apply by
- Closing date not listed
Posted
- 14 May 26
About this role
The mission of Microsoft Digital Security & Resilience (DSR) is to enable Microsoft to build the most trusted devices and services, while keeping our company safe and our data protected. As part of Microsoft’s Security, Compliance, Identity, and Management organization, and a steward of Microsoft and our customer’s data, a core function of Microsoft DSR is ensuring the security of every aspect of the business. Microsoft DSR is responsible for company-wide information security and compliance, with a strategic focus on information protection, assessment, awareness, governance, and enterprise business continuity.As a manager of the Security Engineering team, you will have an opportunity to contribute your deep technical leadership and problem-solving skills to lead a team of engineers working on the security of the underlying platform, production code and infrastructure of many Microsoft products used by millions of customers, including Office 365, OneDrive, SharePoint, Microsoft Teams, Skype, and Cortana. We build and manage services to manage continuous security posture of cloud scale services. The team is customer-focused with an emphasis on security, a great user experience and high reliability. You would drive solutions to challenging technical problems involving security for large scale systems and lead critical design initiatives, be accountable for delivery and take part in strategic and tactical decisions in the context of mission-critical services.
As an Engineering Manager on the team, your leadership will be critical in ensuring engineering rigor and driving security innovation. You must be passionate about building secure services and will also have opportunities to nurture new ideas for additional business outcomes and deliver high quality of service. You will be leading and influencing other engineers on the team and across groups, create and maintain positive and productive working relationships.
Responsibilities
- Lead the architecture, design and implementation of security engineering and security automation projects in the context of large scale services, working with a variety of stakeholders.
- Lead your team while also collaborating with stakeholders in peer teams and organizations to deliver production-grade solutions for security challenges that scale and work across multiple products while meeting standards of service quality, availability, scale and performance.
- Influence and align product vision by collaborating with customers, partners, product management and engineering teams.
- Have a hands-on approach to technical leadership in setting the engineering direction for the team with sound design and development best practices.
- Drive engineering roadmaps, leading teams, mentoring, and helping others grow.
- Own career development of team through active coaching.
- Lead the team by bringing clarity, creating energy, and driving results.
- Create a strong culture of engineering excellence, customer passion, collaboration, diversity, and inclusion.
Required
- 8-10 years of overall industry experience in software development and building world class solutions with 3-5 years of that as SWE manager.
- A Bachelor’s degree in Computer Science or equivalent experience
- Experience in designing, coding, debugging and testing production grade cloud services
- Experience/understanding of addressing security issues in distributed cloud-based environments and across the dev ops ecosystem.
- Experience in technical leadership in driving engineering roadmaps, leading v-teams, mentoring and helping others grow technically.
- Knowledge of common security vulnerabilities/mitigations
- Excellent communication, cross-team collaboration/influence, presentation skills.
- Passion to grow and develop other engineers and leads.
- Proficient with a cloud computing environment like Azure (preferred), GCP or AWS.
- Experience with CICD pipelines/automation, agile/scrum processes
- Experience building and operating scalable microservices using Docker + Kubernetes.
- Ability to reason about security challenges and propose practical solutions
- Knowledge of Security Development Lifecycle, security standards and frameworks like NIST, OWASP, etc.
- Experience implementing security features/automated mitigations for common security issues.
- Ability to define, design and implement telemetry and proactive monitoring for the services to run the operations efficiently in production environments.
- Experience with security tools/techniques such as SAST, DAST, fuzzing, pen-testing, etc.
- Exposure to security protocols and infrastructure components such as OAuth, OIDC, PKI, IRM, A/AD, etc.
- Experience with reporting technologies/frameworks such as PowerBI.
- Experience with Kusto or other big data stores