Principal Technical Advisor for Cybersecurity Incident Response

Microsoft

Confirmed live yesterday High trust

Hybrid

Quick summary

Work type: Hybrid
Location: —
Salary: $130,900–$277,200 / yr
Posted: 2 days ago
Freshness: Confirmed live yesterday
Closes: Apr 7, 2027

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $169k

This role $204k

$112k $295k

below market most similar roles pay here above market

This role pays more than 78% of similar roles. Most pay $142,400–$195,000 — the blue band above. At the midpoint, this role pays about $204k versus about $169k for comparable roles.

Based on 240 similar postings.

Employer

About Microsoft

Microsoft Corporation is a global technology leader producing software, hardware, and cloud services including Windows, Office 365, Azure cloud platform, Xbox gaming, and Surface devices. Industry: Software & Cloud Computing

Microsoft currently has 648 open roles on FindRole.

Listed pay typically runs $119,800–$234,700 across 624 roles with salary data.

Most-posted roles

View all roles at Microsoft

At a glance

TL;DR · Principal Technical Advisor for Cybersecurity Incident Response

Role Posting Log in to save

The Principal Technical Advisor for Cybersecurity Incident Response joins the Customer Service & Support organization to serve as a service delivery focused subject matter expert. You will support Cybersecurity Incident Response Team staff technical readiness and process compliance while providing in-depth expertise for incident response scenarios. Daily responsibilities include managing complex escalated problems, refining diagnostic data logging, and defining engagement models for incident response. You will lead investigations requiring advanced forensic judgment and influence standards for data handling and investigative rigor. The role requires expertise in Cloud (Azure, Microsoft 365) and Windows environments, specifically regarding adversary behaviors, compromise analysis, and detection techniques. Key competencies include expert problem-solving, case management, and technical leadership to mitigate issues and proactively drive solutions within a collaborative environment.

Skills

Cybersecurity Incident Response Azure Microsoft 365 Windows Threat Investigation Data Handling Compliance Network Operations System Development Software Support AI SC-900 ISC2 CC CISSP AI-900 AI-901

What you'll do

Manage technical readiness and process compliance for Cybersecurity Incident Response Team (CIRT) support engineers.
Provide expert technical guidance for cybersecurity incident response scenarios across Azure, Microsoft 365, and Windows environments.
Lead advanced forensic investigations and make critical decisions under high-pressure, time-sensitive conditions.
Define and evolve engagement models, capability readiness, and service delivery frameworks for incident response.
Strategize technical triages and provide actionable feedback to key partners and stakeholders.
Partner with product teams to drive fixes and identify trends for future product enhancements.
Refine global processes to improve diagnostic data logging and facilitate communication between engineering and support teams.
Influence standards for data handling, investigative rigor, and compliance across all CIRT operations.

What we're looking for

Bachelor's Degree in IT, Computer Science, Business Administration, Electrical Engineering, or Business Leadership and 8+ years of relevant technical experience.
8+ years of prior product, customer support, and/or technical support experience.
Ability to pass the Microsoft Cloud Background Check every two years.
Must provide proof of citizenship or U.S. permanent residency for export control and government agency access.
Recognized expertise in incident response and threat investigation for Cloud (Azure, Microsoft 365) and Windows environments.
15+ years of system development, network operations, software support, IT, consulting, or technical troubleshooting experience (preferred).
5+ years of experience in Cybersecurity Incident Response (preferred).
SC-900 and ISC2 CC certifications; CISSP, AI-900, AI-901, or technology certifications (preferred).

Similar roles

Principal Engineer, Cybersecurity Incident Response

Target

Brooklyn Park, MN 48 days ago

Python SOAR SIEM CI/CD DevSecOps Kubernetes REST APIs SQL NoSQL Git PowerShell Bash EDR Cloud Security Secrets Management Digital Forensics Agentic AI Observability Source Control

10+ yrs exp Hybrid

Save

Cyber Security Advisor

FedEx

Collierville, TN 4 days ago

Okta Identity Cloud Azure Active Directory PowerShell F5 BigIP APM F5 BigIP LTM iRules TCL LDAP SAML RBAC Identity Governance & Administration SSL Offloading Certificate Management Ping Federation Network Forensics Endpoint Security Network Intrusion Detection VBA Macros Excel Formulas

6+ yrs exp Hybrid

Save

Principal Cybersecurity Analyst

Northrop Grumman

Sunnyvale, CA 24 days ago $114,000–$171,000

Risk Management Framework ACAS NESSUS SPLUNK SCAP NIST DIACAP NISPOM Vulnerability Scanning System Audits Security Certification Testing Assessment and Authorization Information Systems Lifecycle Cybersecurity Security Controls Continuous Monitoring

5+ yrs exp

Save

Principal Cybersecurity Analyst

Northrop Grumman

Northridge, CA 10 days ago $114,000–$171,000

Risk Management Framework Assessment & Authorization NIST ACAS Nessus Splunk Trellix SCAP JSIG DAAG Security+ Continuous Monitoring Security Certification Testing POA&M SCTM

5+ yrs exp

Save

Cybersecurity Architect Advisor

Fiserv

Columbus, OH +4 25 days ago $127,500–$204,000

AWS Azure GCP Kubernetes Terraform Python Bash CI/CD Zero Trust PCI DSS NIST ISO 27001 VMware Cisco F5 YAML JSON SaaS AI/ML IoT Network Security Encryption Data Protection

10+ yrs exp

Save

Principal Security Engineer, Incident Response

F5 Inc

Seattle, WA +1 38 days ago

Incident Response Cybersecurity AWS Azure GCP Kubernetes SIEM EDR CrowdStrike WAF WAAP API Gateway DDoS Mitigation MITRE ATT&CK FedRAMP NIST SP 800-61 ISO 27001 SOC 2 PCI-DSS Digital Forensics

10+ yrs exp Hybrid

Save