Principal Corporate Counsel

Microsoft • Redmond, WA

2d • $132,200 - $232,800

About The Position

Microsoft’s Digital Crimes Unit (DCU) is seeking a highly motivated and experienced attorney to handle global investigations and drive high-impact projects that disrupt sophisticated cybercriminal networks and other online threats, including ransomware, transnational fraud and scams, and malicious uses of AI. The role focuses on proactive civil litigation, legal and technical innovation, and external engagement to defend Microsoft, its customers, and democratic institutions against cyberattacks and other threats.

The DCU, launched in 2008, is a global team of attorneys, investigators, and analysts working to combat cybercrime, protect customers, and promote trust in Microsoft. In partnership with threat intelligence, fraud and abuse teams, and engineering support, the unit develops legal and technical strategies to detect, disrupt, and deter cybercrime and other cyber- and AI-enabled crime. The DCU is part of the Customer Security & Trust team within Microsoft Global Affairs and Corporate, External, and Legal Affairs.

The attorney will collaborate with threat intelligence and security professionals, security engineers, and fraud and abuse analysts to investigate complex cybercrime, develop and implement strategies, and build affirmative cases involving sophisticated activity and actors. The position calls for technical fluency, curiosity about emerging technology including AI, a growth mindset, and the ability to manage complex litigation with minimal oversight, work across stakeholders amid ambiguity, and deliver under time constraints. The role also offers the opportunity to help make the online ecosystem safer for users globally.

Requirements

• Juris Doctor degree or international equivalent, and at least 4 years of experience as a practicing attorney or equivalent experience.
• Active license to practice law in a jurisdiction and ability to meet admission requirements in the relevant jurisdiction.
• Ability to meet Microsoft, customer, and/or government security screening requirements, including passing the Microsoft Cloud Background Check upon hire or transfer and every two years thereafter.
• Technically fluent, with an interest in the DCU’s mission and a growth mindset and demonstrated curiosity about expanding skills into new areas and emerging technology, including AI.
• Experience managing complex litigation matters with minimal oversight.
• Ability to thrive in ambiguity, identify and work across critical stakeholders, and deliver results under time constraints.

Nice To Haves

• Juris Doctor degree or international equivalent, and at least 5 years of experience as a practicing attorney or equivalent experience.
• At least 3 years of experience as an attorney in a specialized practice area such as litigation, investigations, or cybercrime.
• At least 1 year of in-house counsel experience.
• Experience engaging with government officials and law enforcement, including the Department of Justice, FBI, and foreign equivalents.
• Experience handling complex investigations and litigation.
• Familiarity with the Computer Fraud and Abuse Act (18 U.S.C. § 1030), Access Device Fraud (18 U.S.C. § 1029), Racketeer Influenced and Corrupt Organizations (18 U.S.C. § 1961), and Lanham Act (18 U.S.C. § 2320).
• Experience developing, evaluating, and executing high-impact, time-sensitive strategic projects, and adapting to quickly shifting guidance and priorities.
• Familiarity with the Electronic Communications Privacy Act (ECPA) and other laws and regulations governing disclosure of and access to electronically stored data.
• Experience managing projects and partnering with cross-functional teams.
• Strong written and verbal communication skills, including the ability to translate complex technical findings for a broad range of stakeholders such as law enforcement, legal counsel, and executives.
• Fluency in basic internet and DNS concepts, including how computers exchange data, how domain names map to IP addresses, and how domain names and IP addresses are governed, allocated, and assigned at a high level.
• Desire to learn, grow, and drive change.
• Collaborative and team-first mindset.

Responsibilities

• Work independently and on cross-disciplinary teams on investigations, litigation, and enforcement projects.
• Oversee the collection and production of accurate information for court filings, law enforcement referrals, and internal and external cybersecurity reporting.
• Develop and implement legal and technical strategies to scale DCU operations, including the ongoing incorporation of AI.
• Provide legal advice on government requests for data and voluntary disclosures of data.
• Engage with government officials, industry representatives, and customers on cybersecurity and cybercrime issues.
• Brief executives and deliver public presentations on complex and sensitive matters.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Ph.D. or professional degree