Senior Threat Researcher

Technology, Data & Digital · IT Infrastructure & Security · Cybersecurity · Software Engineering

In short

Microsoft's Defender Experts (DEX) Research team seeks a Senior Threat Researcher to focus on advanced cloud threat research and detection engineering. You will leverage your expertise in SIEM platforms like Microsoft Sentinel and cloud environments such as Azure to develop strategies that protect customers from sophisticated cyberattacks, contributing to global security.

Responsibilities

Lead and execute advanced research on emerging cloud-based threats impacting Microsoft and third-party security products across heterogeneous cloud environments.
Develop and refine detection and response strategies leveraging major SIEM platforms, with a strong emphasis on Microsoft Sentinel, to provide comprehensive threat coverage and response capabilities.
Collaborate with internal and external security teams to design and implement scalable, innovative solutions for multi-cloud threat intelligence, detection, mitigation and response.
Translate complex raw security data into actionable intelligence that enhances the effectiveness of cloud security operations for a global customer base.
Mentor, guide, and drive best practices among researchers and detection engineers on advanced threat hunting and incident response across diverse SIEM ecosystems.
Contribute to industry knowledge and Microsoft’s security posture by publishing research, developing threat models, and proactively identifying threats and attack trends in the cloud.

Requirements

8+ years of experience in security research, detection engineering, threat lifecycle, cloud security in large-scale in complex cloud environments, as well as disciplines related to managed services for SIEM platforms.
Proven ability to lead and execute advanced research on emerging cloud-based threats affecting both Microsoft and third-party security products across heterogeneous cloud environments.
Demonstrated expertise in developing and refining detection and response strategies leveraging major SIEM and EDR platforms, with a strong emphasis on Microsoft Sentinel and Defender, to provide comprehensive threat coverage and response capabilities.
Extensive hands-on experience with cloud platforms—including, but not limited to, Azure—as well as a deep understanding of multi-cloud security challenges and solutions.
Strong practical experience identifying, analyzing, and mitigating real-world cyber threats in complex cloud environments.
Proven ability to work independently and deliver complete solutions.
Demonstrated capability to effectively articulate technical insights and influence multidisciplinary teams.

Skills

AzureSIEMEDRMicrosoft SentinelMicrosoft Defender

#cloud security#threat research#detection engineering#Microsoft Sentinel#cybersecurity#SIEM#EDR

About Microsoft

Empowering every person and organization on the planet to achieve more

Every company has a mission. What's ours? To empower every person and every organization to achieve more. We believe technology can and should be a force for good and that meaningful innovation contributes to a brighter world in the future and today. Our culture doesn’t just encourage curiosity; it embraces it. Each day we make progress together by showing up as our authentic selves. We show up with a learn-it-all mentality. We show up cheering on others, knowing their success doesn't diminish our own. We show up every day open to learning our own biases, changing our behavior, and inviting…

See all open jobs at Microsoft Read more about Microsoft Website