Do you have a passion for helping Microsoft’s clients defend themselves against targeted exploitation? Are you interested in being intimately involved in the latest, cutting-edge developments in the security industry, communicating with security industry leaders, and having a direct impact on the security of all Microsoft customers? Do you want to be on the front lines of helping our customers go toe-to-toe against advanced adversaries? If so, you might be a candidate for the Microsoft Detection and Response Team (DART) within our Security Service Line (SSL) organization.

We are looking for a Security Analyst Manager who will be responsible for managing incident response analysts in the delivery and investigation of advanced cyber-attacks for our worldwide commercial and public-sector enterprise customers as part of our end-to-end security service line.

Microsoft is on a mission to empower every person and every organization on the planet to achieve more. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world. You can help us achieve our mission. 

Industry Solutions helps Microsoft customers around the world get the best outcomes from their investments in the latest Microsoft cloud technologies. We focus on empowering customers on their digital journey, from envisioning new possibilities to delivering solutions that result in targeted business outcomes and a great customer experience. 

Responsibilities

People Management

Managers deliver success through empowerment and accountability by modeling, coaching, and caring.

Model - Live our culture; Embody our values; Practice our leadership principles.

Coach - Define team objectives and outcomes; Enable success across boundaries; Help the team adapt and learn.

Care - Attract and retain great people; Know each individual’s capabilities and aspirations; Invest in the growth of others.

Pre-Sales Support

Coaches teams on how to engage with pre-sales activities. Interacts, as required, with pre-sales team to understand and prioritize the sales opportunities to engage the team appropriately, minimizing overlap. May provide input to Practice Leadership on trends, insights, and opportunities from the field.

Provides input to the Global Capacity Management team on the resourcing based on skills, availability, and/or development plans for their team.

Technical Delivery

Participates in workforce and capacity planning, capability building, and strategizes to address capacity gaps in terms of resource mix (e.g., full-time employees, contractors) and geography.

May collaborate with the account team to understand customer/partner requirements and constraints. Guides their team on understanding customer/partner requirements by providing resources as needed.

Supports project managers and direct reports on projects as needed by bridging gaps in resources. Plans their team's work and responds to changing priorities. May participate in sales to delivery handoff and project kickoff as needed. Supports/sponsors strategic projects (external and internal) by bridging gaps in resources and removing roadblocks.

Guides their team in operational excellence and holds them accountable for deliverables. Identifies opportunities for collaboration with other teams. Ensures adherence to Microsoft Services processes through compliance (e.g., Services Business Desk tools, Global Resource Management Calendar accuracy, Expense Policies, Data Protection policies/standards). Serves as an executive sponsor for strategic projects.

Supports Delivery Management Managers (DMMs) and guides their team on managing escalations. Proactively reports/anticipates issues, analyzes situations and facilitates the process of resolving complex issues in collaboration with account-aligned team as needed.

Proactively engages with internal team to address customer/partner feedback to identify and contribute to the drivers of satisfaction and dissatisfaction. Engages others to determine the root cause, and establish recovery actions to improve experience. Identifies trends and insights to determine best practices to develop, fosters a customer-focused culture, delivers positive customer/partner experiences and shares those experiences with the team.              

Intellectual Property Management

Ensures readiness of team and knowledge sharing in alignment with business needs. Encourages their team in reusing, creating and sharing delivery intellectual property (IP). Promotes use of Managed Standard Offerings (MSO). May partner with Global Pursuit Organization (GPO) and Sales.

Business Development

Sponsors initiatives to develop business, drive awareness, and support internal teams (e.g., delivery management, account delivery executives, services solution specialists) on Managed Intellectual Property (MIP) or new offerings in a domain. encourages appropriate risk-taking in supporting the landing of new offerings.

Readiness

Ensures their team achieve the relevant certification(s) and accreditation in alignment with domain leadership team. Completes all required personal and team training and/or certifications for their technology domain(s) and provides support for their team in obtaining and completing necessary training. Contributes to creating the readiness plan in collaboration with Chief Technology Officer (CTO) and readiness team. Coaches their team and acts as a trusted advisor for stakeholders by providing thought leadership and delivery strategies.

Operational Excellence

Contributes to domain priorities and/or leads special project initiatives (e.g., Microsoft Poll, onboarding). Supports business management by collaborating with business/regional managers or sponsors. Provides recognition to highlight work and drive operational excellence and endorses skills through established processes (e.g., One Profile). Creates business value and shares initiatives across time zones and/or domains when applicable.

Change Management

Communicates the business strategy of supported domain(s) to their team and how the strategy is aligned with the team's work. Participates in discussions on organizational change information/initiatives for the domain(s) supported.

Other

Embody our culture and values

The management and leadership of incident response analysts tasked with monitoring customers via the Microsoft Security Stack 

Developing Business Strategy and providing Technical Though Leadership 

Innovating, partnering, delivering, and maintaining highly impactful, relevant, and profitable cybersecurity offerings and capabilities 

Fostering partnerships with the Cybersecurity leadership team, Microsoft Product Groups and internal security stakeholders. 

Resourcing and managing customer engagements to ensure profitability, high customer satisfaction, and operational excellence 

Ensuring strategic delivery coordination, capacity, and readiness planning against and beyond business plans 

Engages with senior internal and external stakeholders. Manages customer escalations and team’s response to incidents.

On-call work will likely be required as is demanded by the needs of our customers and our business. Position location is flexible.

Qualifications

Required/Minimum Qualifications

Bachelor's Degree in Computer Science, Engineering, Finance, Business, or related field AND 10 + years leadership experience in relevant area of business

OR equivalent experience.

6+ years team leadership or people management experience.

5+ years experience working in the security space.

Additional or Preferred Qualifications

12+ years leadership experience in relevant area of business.

8+ years team leadership or people management experience.

Technical certifications based on domain (e.g., Azure, SharePoint).

Project Management certification (e.g., PMP, Scrum).

Strong people management and leadership, Operational Control (operating and budgeted expense) 

Experience leading both a services organization and product development function 

Developing Business Strategy and providing Technical Though Leadership 

Managing customer engagements escalations to ensure customer satisfaction 

Advanced technical degree or equivalent experience along with keenly honed management and leadership experience 

Expert understanding of technology and security principles and possess knowledge of the cyber threat landscape 

Strong oral and written communication, organization, and interpersonal skills   

Demonstrated history of leading teams of incident responders to successfully investigate cases of advanced targeted exploitation or similar interactive hacking cases 

Proven experience in helping enterprises manage vulnerabilities, measure security and ensure compliance 

Recognized as a subject matter expert in IR with a deep understanding of real-world APT tools, tactics, and procedures. Must be able to quickly determine if cases are criminal, commodity malware, or advanced persistent cases and chart the course of the team’s response appropriate for each type of case 

Cloud SaaS and PaaS experience and an understanding of investigations in those environments and leveraging cloud for investigation scale 

If you are looking for a role that will allow you to use your knowledge and passion to strengthen the security posture of customers, you will have a bright future within our Cybersecurity Detection and Response Team (DART). 

#DART 

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances.  We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the Accommodation request form.

The salary for this role in the state of Colorado is between $131,900 and $197,500. At Microsoft, certain roles are eligible for additional rewards, including annual bonus and stock. These awards are allocated based on individual performance. In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee’s role. Benefits/perks listed here may vary depending on the nature of your employment with Microsoft and the country where you work.US-based employees gain access to healthcare benefits, a 401(k) plan and company match, short-term and long-term disability coverage, basic life insurance, and fitness benefits, among others. 

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.

#indsol