Principal Security Operations Engineer at Microsoft

Department: Security Operations Engineering

Compensation

$142,800 – $274,800/yr

Setup: On-site
Location: Redmond, Washington
Type: Full-time
Level: lead/mgmt
Posted: Aug 29, 2026

Description

Microsoft is hiring a Principal Security Operations Engineer for its Quantum Security & IT Operations team in Redmond, Washington. The role owns cybersecurity and insider-threat incidents, leads technical investigations, containment, recovery, root-cause analysis, and executive closure; coordinates cross-functional responders; and defines the architecture, operating model, and AI-enabled capabilities for a Security Operations Center. The position requires advanced education and substantial experience in cybersecurity, threat modeling, SIEM, incident response, or equivalent experience, and is onsite. The typical U.S. base pay range is USD 142,800–274,800 per year, with higher ranges for the San Francisco Bay Area and New York City metropolitan areas.

Required Skills

Cybersecurity
Threat modeling
Microsoft Sentinel
KQL
Incident response
Anomaly detection
Root-cause analysis
AI SOC

Additional Information

Minimum Education: Doctorate in Statistics, Mathematics, Computer Science, or a related field
Required Previous Experiences: 3+ years of experience in software development lifecycle, large-scale computing, threat modeling, cybersecurity, anomaly detection, SOC detection, threat analytics, SIEM, IT, or operations incident response
4+ years of experience in software development lifecycle, large-scale computing, threat modeling, cybersecurity, anomaly detection, SOC detection, threat analytics, SIEM, IT, or operations incident response
6+ years of experience in software development lifecycle, large-scale computing, threat modeling, cybersecurity, anomaly detection, SOC detection, threat analytics, SIEM, IT, or operations incident response
6+ years of experience in cybersecurity, security operations, incident response, insider threat, threat analytics, or SIEM
Preferred Qualifications: CISSP, CISA, CISM, SANS, OSCP, or Security+ certification
Experience leading complex security incidents end-to-end
Hands-on Microsoft Sentinel or enterprise SIEM experience
Experience with corporate insider-threat investigations and dedicated insider-threat platforms
Experience with agentic AI or LLM-based security automation
Experience protecting strategic research programs and export-control environments

About Microsoft

Microsoft

business applications

Download free Microsoft Outlook email and calendar, plus Office Online apps like Word, Excel, and PowerPoint. Sign in to access your Outlook email account.

View full company profile