katrina liu
Microsoft Security.png

Microsoft Security

 

Microsoft Security

Over the past several years, I’ve focused on designing and delivering highly complex security products. I joined Microsoft in 2021, starting with Microsoft Sentinel, where I owned the onboarding, threat management, and content management experiences. Later, I stepped into a leadership role, guiding a team of talented product designers to create world-class security experiences across Microsoft Sentinel, Defender Experts, Defender for DevOps, and Defender for API. In addition, I contributed to key initiatives for Microsoft Defender for Cloud, Microsoft Purview, Microsoft Entra, and Security Copilot, helping shape the future of AI-first security solutions at Microsoft.

 
 

Microsoft Sentinel

What is Microsoft Sentinel?

Microsoft Sentinel is a scalable, cloud-native security information and event management (SIEM) that delivers scalable, cost-efficient security across multicloud and multi-platform environments with built-in AI, automation, threat intelligence, and a modern data lake architecture. It is part of Microsoft’s multi-billion dollar Security business, which achieved a 234% ROI in 2024.

My role and impact

  • Delivered a comprehensive set of strategies and visual concepts that helped define the product direction for an AI-first experience. The outcomes of the workshop received positive feedback from PM, Engineering, and UX partners, reinforcing the value of early design leadership in shaping vision and execution.

  • Facilitated alignment across case management, incident, Copilot, and Defender Experts design teams—bringing cohesion to a complex, multi-team space and fostering a unified approach to UX design.

  • Collaborated with the UX Research team on initiatives using the Single Ease Question (SEQ) survey to capture immediate user perceptions and gather actionable feedback.

  • Delivered high quality-design for threat intelligence, hunting, content hub, data lake and more.

 

Defender Experts

What is Defender Experts?

Microsoft Defender Experts for XDR is a managed service that helps security operations centers (SOCs) focus and accurately respond to incidents that matter. It provides extended detection and response for customers who use Microsoft Defender XDR services: Microsoft Defender for Endpoint, Microsoft Defender for Office 365, Microsoft Defender for Identity, Microsoft Defender for Cloud Apps, and Microsoft Entra ID. It also offers an add-on service, Microsoft Defender Experts for Servers, which provides coverage for cloud workloads, beginning with on-premises and multicloud servers protected by Microsoft Defender for Cloud.

My role and impact

  • Built strong partnerships with Defender Experts and case management PM counterparts, ensuring UX is deeply embedded in the early stages of product planning. This collaboration has elevated UX’s role in driving strategic alignment and decision-making.

  • Secured support from the UX research team to conduct a study on Defender Experts’ managed response tooling, aimed at improving analyst efficiency and better supporting the Defender Experts team.

  • Contributed to the tremendous growth with 390% increase in Defender Experts XDR customers, along with positive customer feedback on the user experience of Defender Experts features.

 

Product Design Leadership

Dare to lead— both as a manager and as an IC project lead.
As a design manager, I guided a team of world-class designers across all experience levels, fostering their growth and enabling them to deliver exceptional user experiences. Today, as an IC project lead, I continue to make meaningful impacts by driving product design vision through influence, collaboration, and strategic thinking—ensuring our work not only meets but exceeds user and business expectations. 

Leadership impact:

  • Process implementation
    Established a structured and scalable design process for the Defender Experts team. By identifying gaps in collaboration and alignment across PM, engineering, and design, I introduced a refined workflow that emphasized early usability testing, clear design ownership, and cross-functional kickoff protocols.

  • Design Crit Facilitation
    Led a weekly cross-team design critique for a group of 30+ designers, covering a wide range of topics including Disrupt, Defender Copilot, Secure Future Initiative, Multi-Tenant Organizations, Security Fluent Extension, Threat Intelligence, Responsible AI, Case Management, and Defender Experts. These sessions played a key role in fostering cross-team visibility and promoting knowledge sharing across disciplines.

  • Tool Adoption & Workflow Optimization
    Under my leadership, our team was among the first in the Security UX org to adopt Azure DevOps (ADO) for monthly sprint planning. This shift brought greater clarity and structure to our workflows, benefiting both designers and PM partners.

  • Culture Building
    Organized social gatherings such as team lunches, baby showers, and team-building activities to boost morale and cultivate a positive team culture that encourages collaboration and connection.