Security Researcher - Security Engineering

The Microsoft Detection and Response Team (DART) is looking for a highly organized Cybersecurity Incident Operations Program Manager experienced in cybersecurity, with a specialized focus on incident response. This position plays a crucial role in ensuring efficient operations, effective staffing, and capacity planning, as well as fostering strong collaboration with both internal and external stakeholders. Additionally, the Program Manager will oversee customer relationships, ensuring that operational processes align with business objectives and maintaining high standards of service delivery. 
 

This position is tailored for an individual who not only excels in technical acumen but also demonstrates robust capabilities in engaging with clients and adjusting to the evolving demands of incident response operations. Should you possess the requisite skills and feel prepared to embrace this opportunity, we would be eager to review your candidacy. 
 

Responsibilities

Operational Management 
 

This role will work as part of a collaborative team providing the following: 

• Coordinate staffing and capacity planning for engagements and special event support, ensuring the appropriate allocation of resources to meet demand and customer needs effectively. 

• Manage the implementation of incident management frameworks and procedures. 

• Collaborate with internal teams, including Legal, Security Research, Product Groups, and others, to address and resolve emerging issues. 

• Ensure operational processes maintain alignment with business objectives. 

• Build and maintain strong customer relationships by understanding the needs of our customers and ensuring alignment with service delivery. 

• Facilitate regular check-ins with customers to gather feedback and address their needs. 

• Track and document the status of operational activities, ensuring schedules and priorities are met. 

• Manage daily and weekly communication and status reporting proactively. 

• Lead daily and weekly standup meetings and follow up on meeting minutes and action items. 

• Track and report on key performance indicators (KPIs) related to engagement staffing and metrics. 

• Provide actionable insights to leadership for continuous improvement. 

Operational Excellence   

 
Must be maintained by: 
 

• Completing operational tasks and readiness with timeliness and accuracy.   

• Following Microsoft policies, compliance, and procedures (e.g., Enterprise Services Authorization Policy, Standards of Business Conduct, labor logging, expenses, travel guidelines).   

• Leading by example and guiding team members on operational tasks, readiness, and compliance.   

Qualifications

Required/Minimum Qualifications 
 

• A bachelor’s degree or an equivalent amount of practical, role related experience. 

• A minimum of 3+ years of professional experience in areas such as project management, operations, process enhancement, cybersecurity, or related sectors. 

• A minimum of 1+ years of guiding stakeholders and achieving agreement among individuals at all levels of experience. 

• Flexibility to accommodate non-standard working hours as the job demands. 

Additional or Preferred Qualifications 
 

• Experience in Incident Management or the Incident Response sector, with a focus on enhancing the efficacy and efficiency of incident management operations. 
• Resilience under stress, coupled with a readiness to occasionally operate beyond standard business hours to assist with incidents. 
• Effective interpersonal and communication abilities, conducive to productive collaboration within diverse team structures. 
• Proactive approach in initiating actions and advocating for improvements to establish more streamlined and effective incident management processes. 
• Familiarity with project management methodologies  

Background Check Requirements 

The ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:  
 

Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter. 

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances.  We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the Accommodation request form.

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.