The Microsoft Intune team delivers mobile device management, mobile application management and desktop computer management solutions from the Azure cloud. Using Intune, organizations can provide employees with access to corporate applications, data and resources from virtually anywhere, on platforms such as Windows, iOS, Android and others, all while helping to keep corporate information secure. Intune integrates closely with Azure Active Directory (Azure AD) for identity and access control, Azure Information Protection for data protection, and System Center Configuration Manager to extend management capabilities. Intune is part of the Enterprise Mobility + Security Suite, which is one of the fastest growing enterprise services within Microsoft.

Our team is looking for engineers capable of building solutions to experiment, prototype, or run as a continuous service. You will provide guidance and direction for long term, high quality security solutions to protect Intune infrastructure, services and customers. This role provides growth, learning, and training opportunities; you are expected to not only stay connected to the security industry and community, but to lead and share in the areas you specialize in.
Responsibilities

You will be part of the Intune Security Engineering team that designs, builds, and operates security solutions and processes. Our strategy covers Protect, Detect, and Response activities. Effective implementation requires tight coordination and partnership with teams such as Application Security, Incident Response, Red Team/3rd party penetration testers, Compliance, and Privacy as well as Intune Engineering and Program Management teams across different locations.

Role responsibilities include:

Learn, define, and maintain Prevent & Detect Configuration Baselines and solution documentation across security domains such as Asset Inventory, Network Surface Area, Identity/Authentication/Authorization, Application Integrity, Data Protection, Hosting Platforms, Anti-malware/AV, Intrusion Prevention, and Attack Detection.
Update security incident response processes; participate in on-call rotation for high-priority escalations
Drive Software Engineering security investments and priorities, including specifications, hands on coding, and partnering with engineering teams for delivery
Deploy solutions/onboard Intune assets to variety of security capabilities to reduce risk; support measurement of security state across assets
Participate in processes such as security reviews to identify and assess risks to Intune infrastructure, services and customers; provide recommendations for risk reduction to leadership and engineering teams

Qualifications

5+ years of experience in security operations and/or engineering, preferably in a role(s) focused on mitigation and remediation (defense).
3+ years of industry or related experience developing, testing, and maintaining online services
2+ years of experience of working with external customers
Strong understanding of common attacks vectors and methods; ability to determine the risk they pose to an environment and experience mitigating their impact
B.A. or B.S. degree in Computer Science, Computer Engineering, Information Systems, or equivalent experience

One or more of the following skills will get our attention

Excellent coding, debugging and analytical skills
Excellent knowledge of object-oriented programming language paradigms
Expertise in Data Protection, Attack Detection, and/or Network Security methods and solutions
Expertise in data technologies, distributed systems and relational databases
Experience in developing large scale services
Experience working with Azure (Cloud Services, Active Directory, Information Protection), Intune, and/or System Center Configuration Manager