Responsibilities
- Design, manage, and enhance the Microsoft Defender suite to secure endpoints, identities, email, and cloud applications.
- Manage the Privileged Access Management system, including user lifecycle, policy setup, vault maintenance, updates, and integrations.
- Connect security signals from Defender and PAM tools into SIEM/SOAR and IT service management workflows to improve detection accuracy and response speed.
- Build and deploy security solutions across cloud and on-prem infrastructure, with emphasis on Azure and Microsoft 365, including hardening, configuration standards, and automated controls.
- Oversee the full lifecycle of security tools, covering performance, licensing, capacity, upgrades, and future planning to ensure reliability.
- Develop and refine detection logic, including analytics rules, alert tuning, threat hunting scripts, and automated incident response playbooks.
- Conduct security evaluations and manage vulnerabilities through scanning, risk ranking, tracking remediation, and verifying fixes in coordination with IT and engineering teams.
- Collaborate with infrastructure, identity, and application teams to integrate security into system designs and development pipelines using least privilege and secure-by-default principles.
- Serve as a technical escalation point during security incidents, leading triage, threat containment, remediation coordination, and implementation of preventive measures.
- Document and maintain operational guides, procedures, and architectural references for security systems and processes.
- Assist in audit readiness by supplying technical evidence, control descriptions, and expert input on implemented security measures.
- Monitor evolving cyber threats and advancements in Microsoft security technologies to propose and deploy practical security enhancements.
Benefits
- Monthly performance-based bonuses
- Restricted Stock Units with a four-year vesting schedule
Work Arrangement
Hybrid — Seattle
Other
- This position is open to candidates in the Seattle area.
- You will have a hybrid remote/in-office schedule where you will work from our casual, pet-friendly office at least 3 days a week.