Senior Security Researcher

Teknik, data och digitalt · IT-infrastruktur och säkerhet · Cybersäkerhet · Mjukvaruutveckling · Dataanalys

I korthet

Microsoft is seeking a Senior Security Researcher to analyze and apply threat intelligence to investigations, protecting customers and Microsoft's products from sophisticated cyber threats. This role involves collaboration with incident response and product teams, driving security improvements, and communicating findings to diverse audiences. A Bachelor's degree and experience in cybersecurity or related fields are required, along with the ability to obtain a US Government Secret Security Clearance.

Ansvarsområden

Support high-impact investigations with threat intelligence expertise for proactive security research and reactive incident response.
Lead attribution and threat actor analysis by collecting, modeling, attributing, and documenting gathered intelligence.
Enable Microsoft Security teams by delivering actionable intelligence and attribution insights for threat detection, investigation, and remediation.
Drive product and service improvements by translating adversary activity insights into recommendations.
Identify and track emerging threats by discovering new adversary activity and developing threat clusters.
Communicate intelligence to diverse audiences through written reports, executive briefings, and customer-facing presentations.
Strengthen the intelligence feedback loop by sharing investigation insights with MSTIC tracking teams.

Krav

Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 4+ years of experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years of experience.
OR Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field.
OR equivalent experience.
Must have an active U.S. Government Secret Security Clearance.
Must pass Microsoft Cloud background check.
Must verify U.S. citizenship.

Önskade kvalifikationer

Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 8+ years of experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 6+ years of experience.
OR Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years of experience.
OR equivalent experience.
Background in cloud and identity-based intrusions (token theft, OAuth abuse, SaaS-native tradecraft).
Detection engineering or hunting query development at scale.
Use of automation, data science, or AI tooling.
Experience delivering customer or executive briefings under time pressure during active incidents.
Working knowledge of malware used in targeted campaigns.
Familiarity with Microsoft security data sources (MDC, Defender XDR, Sentinel, Azure Resource Graph).
Strong technical knowledge of adversary capabilities, infrastructure, and techniques.
Experience tracking advanced financially motivated or state-sponsored adversaries using the Diamond Model.
Demonstrated experience producing actionable intelligence.
Familiarity with host, log, and network forensics, common protocols, and adversary command-and-control methods.
Demonstrated experience with log analysis and query languages (KQL/Kusto, SQL, or equivalent) across SIEM, identity, endpoint, or cloud telemetry.
Experience with large-scale cloud, identity, and endpoint telemetry.
Experience supporting incident response and familiarity with common IR procedures and tooling.
Ability to communicate findings clearly to technical and executive audiences.

Förmåner

Base pay range: USD $119,800 - $234,700 per year (US); USD $160,200 - $261,000 per year (SF Bay area and NYC metropolitan area).
Certain roles may be eligible for benefits and other compensation.
Access to additional benefits and pay information via provided link.

Färdigheter

KQLSQLMSTICDARTMDCDefender XDRSentinelAzure Resource Graph

#security#cybersecurity#threat intelligence#incident response#cloud security

Om Microsoft

Empowering every person and organization on the planet to achieve more

Every company has a mission. What's ours? To empower every person and every organization to achieve more. We believe technology can and should be a force for good and that meaningful innovation contributes to a brighter world in the future and today. Our culture doesn’t just encourage curiosity; it embraces it. Each day we make progress together by showing up as our authentic selves. We show up with a learn-it-all mentality. We show up cheering on others, knowing their success doesn't diminish our own. We show up every day open to learning our own biases, changing our behavior, and inviting…

Se alla lediga jobb hos Microsoft Läs mer om Microsoft Webbplats