Security Research Intern

Microsoft•Redmond, WA

About The Position

As a Security Research Intern, you will work under supervision to design and conduct security research related to malware, threats, vulnerabilities, adversaries, threat intelligence, detection, remediation, and other applications that help understand the threat landscape. The work aims to disrupt adversaries or provide protection through defensive products and services. You will help develop solutions, including first-party mitigations, collaborate with customers and partners, and support operational security, security incidents, security reviews, and reporting. The role is part of a team building a cloud solution that gives customers visibility and control while helping them respond to evolving cyber threats. The team develops advanced threat detection capabilities using machine learning and behavioral profiling, and engineers a hyperscale service to defend millions of hosts. Interns work on real-world projects with teams across the world and contribute to Microsoft's mission and culture of growth, innovation, collaboration, respect, integrity, accountability, and inclusion.

Requirements

Currently pursuing a bachelor's degree in Statistics, Mathematics, Computer Science, or a related field.
Must have at least one additional quarter or semester of school remaining after completing the internship.
Must meet Microsoft, customer, and/or government security screening requirements, including passing the Microsoft Cloud Background Check upon hire or transfer and every two years thereafter.

Nice To Haves

Currently pursuing a master's degree in Statistics, Mathematics, Computer Science, or a related field.

Responsibilities

Analyze threat trends and anomalies to determine operational impact.
Determine threat vectors and potential mitigation strategies.
Learn about systemic security issues and how to address them.
Process threat reporting from internal and external sources.
Provide threat data based on intelligence requirements or customer requests.
Identify security defects, vulnerabilities, and deficiencies in security guidance.
Contribute code to technical implementation and automation of solutions to security issues, such as signature detection, malware analysis, threat analysis, or reverse engineering.
Use research and experimentation results to support architecture or product direction.
Identify dependencies and overlap with other teams or team members, and provide constructive input to help integrate work in a timely manner.
Communicate the status of deliverables and dependencies to meet schedules.
Protect the tools, techniques, information, and results of security practices.
Respond to incidents involving systems or products as needed.
Use penetration-testing results to improve products and services.