Senior Cyber Range Operations Lead

OverviewWith more than 45,000 employees and partners worldwide, the Customer Experience and Success (CE&S) organization is on a mission to empower customers to accelerate business value through differentiated customer experiences that leverage Microsoft's products and services, ignited by our people and culture. We drive cross-company alignment and execution, ensuring that we consistently exceed customers' expectations in every interaction, whether in-product, digital, or human-centered. CE&S is responsible for all up services across the company, including consulting, customer success, and support across Microsoft's portfolio of solutions and products. Join CE&S and help us accelerate AI transformation for our customers and the world. The Global Customer Success (GCS) organization, an organization within CE&S, is leading the effort to enable customer success on the Microsoft Cloud by harnessing leading, AI-powered capabilities and human expertise to deliver innovation solutions that accelerate business value, drive operational excellence and nurture long term loyalty. Microsoft's Detection and Response Team (DART) is seeking a skilled and highly organized Senior Cyber Range Operations Lead to design, develop, and maintain proactive offerings that increase our customer's cybersecurity resilience in the face of evolving threats. This role combines deep technical expertise with security-focused offerings, development, leadership, and collaboration across global teams. You will be part of a globally distributed, mission-driven team that responds to some of the most complex and high-impact cybersecurity incidents in the world. You will work alongside experts in threat hunting, reverse engineering, infrastructure containment and recovery, and help shape the future of Microsoft's incident response capabilities. Join a world-class security team dedicated to helping organizations stay ahead of cyber threats. As a Senior Cyber Range Operations Lead you will design and deliver cutting-edge resilience and incident response exercises that empower customers to anticipate, withstand, and recover from attacks. This is a role for someone passionate about proactive security, innovation, and customer success. Additionally, the Senior Cyber Range Operations Lead will also oversee customer relationships and support tailoring practical scenarios to those customers, ensuring that delivery processes align with business objectives and maintaining high standards of service delivery. This role is for a professional who not only excels in technical acumen, but is passionate about cybersecurity. The candidate should also demonstrate robust capabilities in engaging with clients and be driven to make a global impact by helping organizations improve their cybersecurity resilience. Should you possess the requisite skills and feel prepared to embrace this opportunity, we would be eager to review your candidacy. This role is flexible in that you can work up to 100% from home however up to 75% travel to deliver onsite with customers may be required. Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

ResponsibilitiesCyber Range Development : Architect and build cyber ranges that replicate enterprise environments, including networks, endpoints, cloud services, and critical infrastructure.Integrate threat emulation frameworks and automation tools for realistic attack simulations.Ensure ranges support multi-scenario exercises (e.g., ransomware, supply chain compromise, insider threats).Design and implement cyber ranges that replicate enterprise-scale environments, including hybrid cloud, identity systems, and critical infrastructure.Integrate threat emulation frameworks and automation for repeatable, high-fidelity attack simulations.Ensure ranges support multi-scenario exercises aligned with current threat intelligence and Microsoft security priorities. Red Team Exercise Design & Execution : Collaborate with White Team and Blue Team stakeholders to define objectives, scope, and success metrics.Develop adversary emulation plans aligned with MITRE ATT&CK and emerging threat intelligence.Conduct controlled offensive operations within the range to validate detection and response capabilities to assess resilience and identify gaps. Delivery & Facilitation : Lead and deliver cyber resilience exercises for strategic customers, including hands-on incident response drives and tabletop exercises for executives and security teams.Provide actionable recommendations, post-exercise debriefs, gap analysis, and actionable recommendations for resilience improvement and response maturity. Continuous Improvement : Maintain and update cyber ranges with latest technologies, vulnerabilities, and attack techniques.Research and integrate innovative tools for automation, orchestration, and scenario generation.OtherEmbody our culture and values