Security Researcher II / Senior Security Researcher

Microsoft • ,

1d • $102,100 - $261,000

About The Position

Microsoft is seeking experienced Security Researcher II and Senior Security Researcher candidates with a Digital Forensics and Incident Response background. The role supports a global team that performs threat hunts, assists with investigations, develops threat intelligence, and brings effective investigation practices into Microsoft tooling and products. Researchers identify and catalog new attacker tactics, techniques, and procedures (TTPs) and victims, and deliver customer notifications to help protect enterprise customers worldwide and improve Microsoft products.

The position involves researching and contextualizing threats and vulnerabilities, enriching intelligence with detection logic and security recommendations, and briefing internal and external teams on current security threats. Researchers also create and adapt written content based on business needs and customer feedback, and are expected to embody Microsoft’s culture and values.

The role requires access to export-controlled information. The successful candidate must provide citizenship or qualifying status documentation, undergo citizenship verification, and meet applicable Microsoft, customer, and/or government security screening requirements, including a Microsoft Cloud Background Check at hire or transfer and every two years thereafter. The candidate must also be able to obtain and maintain a U.S. security clearance.

Requirements

• Master’s degree in Statistics, Mathematics, Computer Science, Computer Security, or a related field and at least 1 year of experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection; or a bachelor’s degree in one of those fields and at least 2 years of such experience; or equivalent experience.
• Provide proof of country of citizenship, U.S. permanent residency, or other qualifying protected status for export-control eligibility assessment; citizenship will be verified with a valid passport, with other applicable documentation accepted for lawful permanent residents, refugees, and asylees.
• Meet Microsoft, customer, and/or government security screening requirements, including passing the Microsoft Background Check and Microsoft Cloud Background Check upon hire or transfer and every two years thereafter.
• Ability to obtain and maintain a United States Security Clearance.

Nice To Haves

• Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or a related field; or a master’s degree in one of these fields and at least 3 years of relevant experience; or a bachelor’s degree in one of these fields and at least 4 years of relevant experience; or equivalent experience.
• At least 5 years of professional experience in software development lifecycle and cybersecurity, or a master’s degree in Computer Science or a related field.
• Knowledge of security fundamentals across Microsoft client, server, and cloud platforms.
• Familiarity with SQL or Kusto Query Language (KQL), or large-database/SIEM query languages such as Splunk, Humio, or Kibana.
• Familiarity with Jupyter Notebooks or building equivalent threat-hunting automations using scripting languages.
• Experience with sophisticated threat actor evidence, including IOCs, IOAs, and TTPs.
• Microsoft Azure platform knowledge and experience.
• Familiarity with forensic log artifacts.
• Familiarity with the Microsoft security product stack.
• Familiarity with Windows, Linux, and/or macOS forensic analysis.
• Technical, investigation, cybersecurity, digital forensics, or DFIR certifications, such as CISSP, CSSLP, SANS GIAC, or Azure certifications.
• Professional experience with Azure DevOps, GitHub, and other source-control systems.
• Familiarity with Continuous Integration / Continuous Delivery.
• Written and verbal technical communication skills and demonstrated ability to contribute to cross-team improvements.

Responsibilities

• Research, analyze, and contextualize threat actor, tool, technique, and vulnerability-related threat intelligence.
• Enrich threat intelligence with a thorough understanding of detection logic and security recommendations.
• Create briefings and brief internal and external teams on the latest security threats.
• Adapt writing style to create new content based on business needs and customer feedback.
• Perform threat hunts and assist with investigations.
• Develop threat intelligence and cultivate effective investigation practices in Microsoft tooling and products.
• Support a global team in identifying and cataloging new attacker TTPs and victims, and deliver customer notifications.
• Embody Microsoft’s culture and values.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level