Principal Technical Advisor for Cybersecurity Incident Response

Principal Technical Advisor for Cybersecurity Incident Response | Microsoft Careers Skip to main content Microsoft Careers Careers Careers Search Search jobs Sign in Single PositionView All JobsPrincipal Technical Advisor for Cybersecurity Incident ResponseUnited States, Washington, Redmond +1 moreApply nowAdd to cartFind out how well you match with this jobUpload your resumeJob descriptionCompany and benefitsJob number200042396Date postedJul 20, 2026Work site3 days / week in-officeTravelLess than 25%ProfessionTechnical SupportDisciplineTechnical Support AdvisoryRole typeIndividual ContributorEmployment typeFull-TimeOverviewWith more than 45,000 employees and partners worldwide, the Customer Experience and Success (CE&S) organization is on a mission to empower customers to accelerate business value through differentiated customer experiences that leverage Microsoft’s products and services, ignited by our people and culture. We drive cross-company alignment and execution, ensuring that we consistently exceed customers’ expectations in every interaction, whether in-product, digital, or human-centered. CE&S is responsible for all up services across the company, including consulting, customer success, and support across Microsoft’s portfolio of solutions and products. Join CE&S and help us accelerate AI transformation for our customers and the world.Within CE&S, the Customer Service & Support (CSS) organization builds trust and confidence for every person and organization through delivering a seamless support experience. In CSS, we are powered by Microsoft’s AI technology to help consumers, businesses, partners, and more, resolve their issues quickly and securely, helping prevent future problems from occurring and achieving more from their Microsoft investment.The Principal Technical Advisor for Cybersecurity Incident Response is a service delivery focused subject matter expert. You will be responsible for Cybersecurity Incident Resonse Team (CIRT) support engineer staff technical readiness and process compliance. You will provide in-depth technical & subject matter expertise for cybersecurity Incident Response scenarios all while driving delivery excellence in a collaborative environment to achieve superior customer outcomes. Your primary accountability is to support staff and managers on the teams you work with. This opportunity enables and promotes career growth as a recognized technical Subject Matter Expert (SME).Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.ResponsibilitiesCase Management (Delivery Excellence): Demonstrate expert problem-solving, case management, and customer service skills. Strategize technical triages and provide actionable feedback to key partners and stakeholders.Managing Collaboration Activities: Handle complex escalated problems, partner with product teams to drive fixes, and identify trends in customer feedback for future product enhancements.Process Improvement: Refine processes by partnering with senior leadership across global teams, lead efforts to improve diagnostic data logging, and facilitate communication between engineering and support teams. Serve as an early warning system and put plans in place to mitigate issues and proactively drive solutions.Define and evolve engagement models, capability readiness, and service delivery frameworks for incident response.Serve as a recognized expert in incident response and threat investigation, specializing in Cloud (Azure, Microsoft 365) and Windows environments; adversary behaviors, compromise analysis, and detection...