לוח משרות דרושים אבטחת מידע / סייבר בשרון

The Edge & Platform Security Fundamentals (EPSF) org ensures we ship the world's most secure operating systems, cloud platforms, and edge devices. We conduct research into the highest priority attack surfaces and scenarios, including into Microsoft strategic investments such as Adaptive Cloud, AI, and next generation OS. Our research teams include leading researchers in this domain, finding and fixing critical issues. Aside from security research, we also emphasize a move to shift-left the discovery of security incidents via automation to reduce toil and tax on Microsoft engineers.

In this role, you will contribute to the development and execution of the security vision, roadmap, and priorities for the EPSF IL group, collaborating closely with the security researchers in EPSF IL. You will map new domains, analyze potential targets for research, prioritize and schedule security assessments and sync them with the development efforts, define processes to ensure adherence to EPSF security recommendations across product groups, and monitor their implementation. You will serve as the primary contact point for product teams engaging with EPSF IL, understanding their requirements and security challenges. You will also be the main contact point to the broader EPSF PM organization, ensuring alignment across geos, and a unified strategy. You will gather data and present metrics reflecting progress towards EPSF IL goals, triage incoming queries, and maintain visibility into new products being developed.
Responsibilities

Help develop and drive the security vision, roadmap, and priorities of the EPSF IL group.
Prioritize and schedule security assessments and development work in coordination with EPSF IL Security researchers.
Help define the processes to ensure product groups are following and addressing security recommendations, and monitor these recommendations are applied.
Defining objectives, key results, and corresponding work items for EPSF IL teams, in coordination with EPSF IL staff.
Serve as the focal point of EPSF IL for engineering product teams, understand product teams requirements and security pain points.
Serve as the main contact point to the broader EPSF PM org, aligning our goals and standards to the greater EPSF.
Collect data from Engineering Systems and other sources to present metrics that show progress towards EPSF goals.
Triaging incoming questions to the EPSF IL team and ensuring that questions get responses.
Ensure we have visibility into products and features being developed under EPSF purview.

Adaptive cloud is a new and exciting domain, bridging the gaps between cloud environment and edge devices, so that our customers can run their workloads where it best suits them. This is an opportunity to influence the security of this domain, covering cloud security, OS environments, deployment challenges and end to end research.

The Edge & Platform Security Fundamentals (EPSF) org ensures we ship the world's most secure operating systems, cloud platforms, and edge devices. We conduct research into the highest priority attack surfaces and scenarios, including into Microsoft strategic investments such as Adaptive Cloud, AI, and next generation OS. Our research teams include leading researchers in this domain, finding and fixing critical issues, and developing techniques and tools that help us scale the security research.

Being part of EPSF IL, you will build a new team of security researchers tasked with helping Microsoft ship the most secure products in the new domain of Adaptive cloud. The ideal candidate will have broad experience in both cloud security research as well as OS and container security, and with leadership qualities to lead additional researchers in hands on research.
Responsibilities

Build a new security research team from the ground up, defining the targets and roadmap.
Lead the work of a security focused research team across multiple concurrent projects.
Perform strategic and independent security research, discover new bug classes and offensive techniques.
Collaborating with partner teams and organizations on research findings to maximize security impact.
Contribute to improving the security posture of Adaptive cloud products.
Evaluate tools, techniques, and procedures for feasibility, effectiveness, and impact.
Develop and refine offensive security knowledgebases, guides, and training.
Contribute to tooling and automation for security research, including bug discovery automation and analysis.

We are looking for a Principal Security Research Manager, who will be responsible for managing security research teams in the delivery, investigation, and remediation of advanced cyber-attacks for our worldwide commercial and public-sector enterprise customers. If you are looking for a role that will allow you to use your knowledge and passion to strengthen the security posture of customers, you will have a bright future within our Microsoft Global Hunting, Oversight, and Strategic Triage (GHOST) team.

Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world.

Microsofts mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.
Responsibilities
The management and leadership of security researchers and analysts.
Developing Business Strategy and providing Technical Thought Leadership
Innovating, partnering, delivering, and maintaining highly impactful, relevant, and profitable cybersecurity offerings and capabilities
Fostering partnerships with the Cybersecurity leadership team, Microsoft Product Groups and internal security stakeholders.
Resourcing and managing customer escalations to ensure profitability, high customer satisfaction, and operational excellence
Ensuring strategic delivery coordination, capacity, and readiness planning against and beyond business plans