Senior or Principal Security Researcher
Technology, Data & Digital · IT Infrastructure & Security · Cybersecurity
In short
Microsoft's Cloud & AI organization is seeking a Senior or Principal Security Researcher for the Global Hunting, Oversight, and Strategic Triage (GHOST) team. This role involves deep analysis of attacker activity, developing threat intelligence, and improving Microsoft's security tooling and products to protect customers worldwide.
Responsibilities
- Performing deep analysis of attacker activity in on-premises and cloud environments.
- Identifying potential threats, allowing for proactive defense before an actual incident.
- Notifying customers regarding imminent attacker activity.
- Providing recommendations to improve customers’ cybersecurity posture going forward and performing threat intelligence knowledge transfer.
- Building proof-of-concept and prototype threat hunting tools, automations, and new capabilities.
- Driving product and tooling improvements by conveying learnings from threat hunting and incident response at scale to engineering partner teams.
- Identifying, prioritizing, and targeting complex security issues that cause negative impact to customers.
- Creating and driving adoption of relevant mitigations and providing proactive guidance.
- Working with others to synthesize research findings into recommendations for mitigation of security issues.
- Sharing across teams.
- Driving change within team based on research findings.
Requirements
- Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
- OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
- OR equivalent experience.
- Ability to meet Microsoft, customer and/or government security screening requirements are required for this role.
- Citizenship verification for export control regulations.
Desired Qualifications
- Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
- OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 6+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
- OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 8+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
- OR equivalent experience.
- Proven knowledge of security fundamentals across Microsoft platforms (Client, Server, Cloud).
- Strong understanding of malware and the modern threat landscape, especially identity-based attacks.
- Familiarity and understanding of SQL or Kusto Query Language (KQL) queries (or experience with large database/SIEM query languages such as Splunk/Humio/Kibana, etc.).
- Familiarity and understanding of Jupyter Notebooks, or building equivalent threat hunting automations with scripting languages.
- Experience with sophisticated threat actor evidence including familiarity with typical Indicators of Compromise (IOCs), Indicators of Activity (IOAs) and Tools, Techniques and Procedures (TTPs).
- Use of forensic analysis tools such as X-Ways Forensics®, WinHex®, Encase®, FTK®, etc.
- Experience with various forensic log artifacts found in SIEM logs, web server logs, AV logs, protection logs such as HIDS and NIDS logs.
Benefits
- Potential eligibility for benefits and other compensation.
Skills
Kusto Query LanguageSplunkHumioKibanaX-Ways ForensicsWinHexEncaseFTK
#Security Research#Cloud#AI#Threat Hunting#Cybersecurity
About Microsoft
Empowering every person and organization on the planet to achieve more
Every company has a mission. What's ours? To empower every person and every organization to achieve more. We believe technology can and should be a force for good and that meaningful innovation contributes to a brighter world in the future and today. Our culture doesn’t just encourage curiosity; it embraces it. Each day we make progress together by showing up as our authentic selves. We show up with a learn-it-all mentality. We show up cheering on others, knowing their success doesn't diminish our own. We show up every day open to learning our own biases, changing our behavior, and inviting…
Company
MicrosoftJob Posted
3 weeks ago
Employment Type
Full Time
Work mode
Remote
Salary
US$119,800–234,700 / year
Experience Level
Senior
Locations
United States
Qualification
Doctoral, Master, Bachelor
Applicants
Be an early applicant
Similar Jobs
Google
Hyderabad, IndiaSenior Software Engineer, Mobile, Looker
Full Time Be an early applicant Posted 4 days ago
Qualcomm
Hyderabad, IndiaSenior Lead/Staff Engineer - Camera Firmware
Full Time Be an early applicant Posted 4 days ago
Qualcomm
Hyderabad, IndiaEngineer, Senior Lead
Full Time Be an early applicant Posted 4 days ago
Qualcomm
Chennai, IndiaWLAN Firmware - Staff engineer
Full Time Be an early applicant Posted 4 days ago
Synopsys Inc
Bengaluru, IndiaSenior Staff Digital Methodology Engineer - Design for Testability (DFT)
Full Time Be an early applicant Posted 4 days ago
Synopsys Inc
Bengaluru, IndiaPrincipal Digital Methodology Engineer - Design for Testability (DFT)
Full Time Be an early applicant Posted 4 days ago