Microsoft
Principal Security Operations Engineering Manager
$143K–$304K
Redmond, WA +1 · On-site · Principal · Full-time · Posted Jul 24, 2026
- Location
- Redmond, WA
Mountain View, CA - Experience
- Required: 3+ years with a doctorate, 4+ with a master’s, 6+ with a bachelor’s, or equivalent experience; plus 1+ year of people management. Preferred: 5+ years with a doctorate, 8+ with a master’s, 12+ with a bachelor’s, or equivalent experience; plus 2+ years of people management and/or team leadership, and 1+ years leading a security function and multidisciplinary teams.
- Education
- Doctorate, master’s, or bachelor’s degree in Statistics, Mathematics, Computer Science, or a related field, or equivalent experience.
About the job
Leads Microsoft’s cloud incident response function, investigating threats and strengthening detection, response, and resilience through security operations and engineering.
What you'll do
- Lead a team responsible for incident response, threat investigation, and cloud security operations.
- Drive investments and cross-organizational solutions to improve threat detection, response, and recovery at scale.
- Develop talent, promote operational excellence through data-driven decisions, automation, and AI innovation, and communicate security priorities to senior leaders.
What they ask for
- A doctorate plus 3+ years, a master’s degree plus 4+ years, a bachelor’s degree plus 6+ years, or equivalent experience in a listed relevant field.
- At least 1 year of people management experience.
- Ability to meet required Microsoft, customer, and/or government security screening requirements, including the Microsoft Cloud Background Check.
Nice to have
- A doctorate plus 5+ years, a master’s degree plus 8+ years, a bachelor’s degree plus 12+ years, or equivalent experience in listed relevant areas.
- Experience leading a security function and multidisciplinary teams; CISSP, CISA, CISM, SANS, OSCP, or Security+.
Pay
USD $142,800 - $274,800 per year (base salary); USD $188,000 - $304,200 per year (base salary)
Tools
Security Operations Center (SOC), security incident and event management (SIEM)
AI focus
Promote AI innovation in security operations and use it to improve threat detection, response, and resilience.
Model-written summary · the original posting is authoritative