Cybersecurity Incident Response Coordinator Job at Microsoft Corporation (Multiple Locations)

Job Description

The Microsoft Incident Response Team - Detection and Response Team (DART) are seeking a skilled and experienced Cybersecurity Incident Response Coordinator to join our team - DART is the first port of call for many customers during a security incident. This pivotal, customer-facing position calls for a tactical and agile leader and influencer, one who is adept at managing complex cybersecurity incidents, fostering synergistic teamwork across multifaceted groups and ensuring the effective staffing and resolution of both proactive and reactive deliveries.

Job Responsibility

Scope customer engagements as part of pre-engagement activities, including assessing client needs, defining desired outcomes, and estimating resources and timelines to ensure a successful delivery.
Oversee escalation pathways ensuring timely responses, directing issues to the appropriate delivery teams, monitoring progress to resolution, and raising matters to leadership, when necessary, especially in cases of urgent and sensitive nature.
Collaborate closely with delivery teams to manage and resolve customer escalations promptly and effectively, ensuring customer satisfaction and maintaining delivery timelines.
Oversee staffing and capacity planning for engagements and special event support, ensuring the appropriate allocation of resources to meet demand and client needs effectively.
Fulfill on-call duties on a scheduled rotation, inclusive of weekends and holidays.
Manage and document the implementation of incident management frameworks and procedures.
Collaborate with internal teams, including Legal, Security Research, Product Groups, and others, to address and resolve emerging issues.
Ensure operational processes maintain alignment with business objectives.
Track the status of operational activities, ensuring schedules and priorities are met.
Manage daily and weekly communication and status reporting proactively.
Lead daily and weekly standup meetings and follow up on meeting minutes and action items.
Identify trends in customer activity that may require an adjustment in operational engagement
Following Microsoft policies, compliance, and procedures (e.g., Enterprise Services Authorization Policy, Standards of Business Conduct, labor logging, expenses, travel guidelines).
Completing operational tasks and readiness with timeliness and accuracy.
Leading by example and guiding team members on operational tasks, readiness, and compliance.
Exercising rigor in meticulous data tracking and concise, detailed communications

Requirements

Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
OR equivalent experience.
Ability to meet Microsoft, customer and/or government security screening requirements
Microsoft Cloud Background Check
Flexibility to work shifts, including assignments during non-standard business hours that may include evening, nighttime, weekends, and/or holidays.
2+ years of hands-on experience with Active Directory, Entra ID, or other enterprise identity platforms and/OR 2+ years threat hunting, windows forensics OR 2+ years pentesting experience
1+ years ability to script or automate tasks using PowerShell or similar tools or 1+ years KQL experience
Experience in high pressure reactive incident response environments where customers are experiencing a potentially business-ending event and your evidence-driven plans of action dictate their next steps.
Security Certifications in any of the following: OSCP, CISSP, SANS Certifications, SC Certifications from Microsoft.
Experience working with methods utilized for evidence collection, maintenance of chain of custody and associated documentation, evidence storage and analysis, and evidentiary reporting.
Seasoned expertise in Incident Management or the Incident Response sector, with a focus on enhancing the efficacy and efficiency of incident management operations.
Resilience under stress, coupled with a readiness to occasionally operate beyond standard business hours to assist with incidents.
Effective interpersonal and communication abilities, conducive to productive collaboration within diverse team structures.
Proactive approach in initiating actions and advocating for improvements to establish more streamlined and effective incident management processes

Nice to have

Doctorate in Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
OR Master's Degree in Computer Science, Computer Security, or related field AND 6+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
OR Bachelor's Degree in Computer Science, Computer Security, or related field AND 8+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
OR equivalent experience

Microsoft Corporation - All Job Offers

Select Country

Cybersecurity Incident Response Coordinator

Job Description

Job Responsibility

Requirements

Nice to have

Looking for more opportunities?

Cybersecurity Incident Response Coordinator

Cybersecurity Incident Response Team Lead

Principal Cybersecurity Incident Response Analyst

Senior Cybersecurity Incident Response Analyst

Cybersecurity Incident Response Team Lead

Expert Incident Response Cybersecurity Analyst

Sr. Cybersecurity Incident Response Analyst

Cybersecurity Incident Responder

Incident Response Lead - Global Security

Our AI answers in your language