Microsoft

Helaas, deze vacature is niet langer actief

Originele vacaturetekst

Security Support Engineer - Incident Response

Customer Experience & Success
• Do you want to empower every person and every organization on the planet to achieve more?
• Do you want to work in an open and inclusive environment where diverse perspectives are celebrated?
• If you love talking to and learning from customers and are excited about working with brilliant technical minds, we want to talk to you.

In Customer Experience & Success, we are focused on how we can Empower, Help, and Advise Microsoft customers. We engage in solving complex problems for customers, we collaborate and knowledge share with each other, and we innovate on solutions to enable our customers to make the most of Microsoft products.

Our team is geographically distributed, we speak many languages and we come from a variety of cultural backgrounds. We are rapidly expanding, and we are looking for talented people with a passion for solving complex issues and an obsession for customer happiness.

Our culture is built around attributes that drive our every decision and our every action:
• Customer Obsession - we exist for and because of the customer. We need people who share that passion and drive to make our customers experiences easy, insightful and trusted.
• Growth Mindset - we value all perspectives and reward individuals that poke at the edges of what they know to be true. We are seeking people that think differently and are biased toward action to accomplish great things.
• Diverse & Inclusive - we enable people who bring a contemporary view to shape our internal teams and encourage all to feel included.
• One Microsoft - we collaborate and value the work of others, combining their learnings with our own to make a better outcome for our customers.
• Making a difference - we drive impact by looking for ways to continually improve our day to day responsibilities and the connections between our work and others.

Interested in Security and Incident Response? Then come join the CSS Security team at Microsoft as a Senior Security Support Engineer responsible for helping customers investigate security incidents in their environment.

Support Engineers (SE) serve as frontline technical resources for Microsoft customers and partners via phone, email or web. They deliver unique value by collaboratively and reactively solving customer problems, providing proactive support advice, contributing to product quality and enhancements and creating self-help assets to broadly reach more customers. You will be part of a team responsible for providing an outstanding technical support experience to our business customers. From problem identification to full resolution, you will own and manage the customer experience over the phone and Web. When needed, you will collaborate with others to engage subject matter experts, Engineering (Product Groups) or Management. Your day to day job will be about providing both technical expertise (either on your own or by involving your colleagues) and about being an excellent communicator and a service oriented professional. You will be given the opportunity to become a subject matter expert in one or more areas and receive guidance and mentorship from your colleagues.

Responsibilities

As a SecuritySupport Engineer, you will be an elite member of a customer facing security support team leading incident response investigations for Microsoft’s enterprise customers. You have experience in analyzing, triaging, scoping, containing, providing guidance for remediation, and determining the root cause of security incidents. You are familiar with collecting and analyzing security incident related data to identify indicators of attack and compromise.

You enjoy working on challenging security issues that require in depth investigation, excellent communication, and complete ownership to drive issues to resolution. You obsess over small details to make sure that each customer interaction not only drives issues to resolution, but also ensures that customers are effectively using Microsoft technologies to further the success of their business.

Beyond extensive technical focus, this role requires the ability to communicate issues and recommendations clearly and concisely and build broad relationships with influencer's to impact key business results. You understand incident response best practices and use this understanding to influence key decision makers.

  • Responsible for the customer support experience with Microsoft
  • Own, troubleshoot and solve customer technical issues, using collaboration, troubleshooting best practices and transparency within and across teams (e.g. swarming)
  • Identify cases that require escalation (either technically or strategically)
  • Create and maintain incident management requests to product group/engineering group
  • Contribute to case deflection initiatives, automation and other digital self-help assets to improve customer/ engineer experience
  • Provide ramp activities, knowledge sharing, technical coaching and mentoring
  • Drive technical collaboration & engagement outside of CSS (Product Engineering teams/Services/Support/Regions)
  • Lead or participate in building communities with peer delivery roles; may be workload or specialty specific
  • Scope customer security incidents
  • Understand and identify indicators of attack and indicators of compromise
  • Analyze incident data from threat analytics tools
  • Communicate recommendations and guidance based on results of security incident analysis to the customer
  • Coordinate a response to the security incident with other Microsoft security and consulting teams
  • Develop, document, and implement runbooks, capabilities, and techniques for IR
  • Perform security triage and analysis on endpoint, server and network infrastructure
  • Collaborate with the security intelligence team by providing samples of malware from the customer’s environment
  • Perform activities necessary for immediate containment and short-term resolution of incidents
  • Maintain current knowledge and understanding of the threat landscape, emerging security threats, and vulnerabilities
  • Investigate root cause of complex security incidents
  • Maintain a high level of confidentiality
  • Participate in an on-call rotation when required

Qualifications

Required:

  • 4+ years Security Incident Response experience with recent operational security experience (SOC, Malware Analysis, IDS/IPS Analysis, threat analytics, windows server, and endpoint security, etc.)
  • 4+ years of experience in Network Security Administration, and/or Systems Administration with experience in Windows Server, Windows Client, and Active Directory Administration
  • 1+ years customer facing experience
  • Experience supporting large and complex geographically distributed enterprise environments with 1000+ users

Preferred Experience:

  • 1+ years of cloud experience with any of the major cloud providers, including cloud security, networking, and migration of multi-cloud or hybrid deployments
  • Automation (PowerShell and/or Python, Java, or a similar language, can be a beginner to intermediate level)
  • Experience in Linux and/or Mac administration

Education

  • Preferred Bachelor’s degree or higher in a technical field, or relevant work experience
  • Preferred IT Industry certifications (Microsoft Certifications On-Prem or Cloud, SANS GCIH, CISSP, CEH, Amazon AWS, etc.)

Ability to meet Microsoft, customer and / or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud Background Check upon hire / transfer and every two years thereafter.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the Accommodation request form.

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.

Dienstverband:
fulltime
Type vacature:
Intern

Vaardigheden

Opleiding

Bachelor

Wat wij bieden

Contract:
Fulltime