Government Cloud Investigations Analyst

Microsoft

Confirmed live yesterday High trust
Hybrid

Quick summary

Work type
Hybrid
Location
—
Salary
$119,800–$234,700 / yr
Posted
8 days ago
Freshness
Confirmed live yesterday
Closes
Mar 31, 2027

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $160k
This role $177k
$98k $249k
below market most similar roles pay here above market

This role pays more than 69% of similar roles. Most pay $135,750–$184,912 — the blue band above. At the midpoint, this role pays about $177k versus about $160k for comparable roles.

Based on 240 similar postings.

Employer

About Microsoft

Microsoft Corporation is a global technology leader producing software, hardware, and cloud services including Windows, Office 365, Azure cloud platform, Xbox gaming, and Surface devices. Industry: Software & Cloud Computing

Microsoft currently has 634 open roles on FindRole.

Listed pay typically runs $119,800–$234,700 across 612 roles with salary data.

Most-posted roles

View all roles at Microsoft

At a glance

TL;DR · Government Cloud Investigations Analyst

JOB TITLE: Government Cloud Investigations Analyst - CTJ - Secret The Government Cloud Investigations Analyst joins the Fraud & Vetting Operations team to conduct high-impact investigations into fraud, abuse, and security incidents within U.S. Government cloud environments like Azure Government and DoD. This role involves performing deep-dive analysis on account compromises, insider risks, and policy violations by correlating signals across identity, billing, and telemetry to reconstruct attack timelines. The analyst manages end-to-end cases, executes containment actions like tenant isolation, and provides risk assessments for high-visibility incidents. Key responsibilities include threat hunting for adversary modus operandi and refining Standard Operating Procedures. Required skills include expertise in threat modeling, anomaly detection, SIEM, and incident response. The work operates within strict federal compliance frameworks including CJIS, FedRAMP, and DoD SRG to protect national interests and government cloud workloads.

What you'll do

  • Conduct deep-dive investigations into fraud, account compromises, and insider risks within U.S. Government cloud environments.
  • Correlate signals across identity, billing, and telemetry to reconstruct attack timelines and determine root causes.
  • Execute containment actions including account disablement, service restrictions, and tenant isolation for high-priority incidents.
  • Manage the end-to-end investigation lifecycle from initial intake and documentation to final closure and disposition.
  • Identify emerging fraud patterns and adversary modus operandi to improve proactive detection systems.
  • Develop and refine Standard Operating Procedures (SOPs) and investigation quality standards.
  • Provide executive-ready risk assessments and case summaries for high-visibility security incidents.
  • Ensure all investigative outcomes and documentation align with federal compliance frameworks like CJIS and FedRAMP.

What we're looking for

  • Must have a Doctorate in Statistics, Mathematics, or Computer Science.
  • Must have a Master's Degree in Statistics, Mathematics, or Computer Science and 3+ years of relevant experience in cybersecurity or IT.
  • Must have a Bachelor's Degree in Statistics, Mathematics, or Computer Science and 4+ years of relevant experience in cybersecurity or IT.
  • Must have equivalent experience to the degree and experience requirements.
  • Must possess an active U.S. Government Secret Security Clearance.
  • Must be a U.S. citizen.
  • Must be able to pass a Microsoft Cloud background check and a CJIS criminal justice information system background check.
  • Experience supporting Azure Government, GCC High, or DoD environments (preferred).

More like this

Similar roles

Senior Security Researcher

Microsoft

5 days ago $119,800–$234,700
Threat Intelligence Incident Response KQL Kusto SQL Sentinel Defender XDR Azure Resource Graph MDC Cybersecurity Vulnerability Research Anomaly Detection Data Science AI Network Forensics Log Analysis SIEM OAuth Diamond Model
4+ yrs exp Hybrid

Security Cloud Solution Architect

Microsoft

65 days ago $86,100–$169,800
Microsoft Entra ID Identity and Access Management (IAM) Active Directory AD FS Microsoft Identity Manager (MIM) Zero Trust MFA Conditional Access Privileged Identity Management (PIM) RBAC Public Key Infrastructure (PKI) Group Policy Hybrid Identity ICAM SC-300 SC-100
2+ yrs exp

Senior Cloud Solution Architect

Microsoft

Remote 23 days ago $106,400–$203,600
Microsoft Azure Microsoft Fabric Azure Databricks Microsoft Purview Azure SQL Azure Database for PostgreSQL Azure Database for MySQL Cosmos DB Microsoft IQ Artificial Intelligence SQL PostgreSQL MySQL Network Operations Systems Administration Software Development Security Resiliency
4+ yrs exp Remote

Chief Technology Officer

Microsoft

Remote 9 days ago $133,000–$222,700
Microsoft Azure Microsoft 365 Microsoft Security Microsoft Copilot AI Dynamics 365 Power Platform GitHub Hybrid Infrastructure Cybersecurity Identity Data Application Modernization NIST SP 800-53 FedRAMP FISMA FIPS DFARS Enterprise Architecture
10+ yrs exp Remote

Cloud Solution Architecture

Microsoft

Huntsville, AL 4 days ago $86,100–$169,800
Microsoft Azure Microsoft Fabric Azure Databricks Microsoft Purview Azure SQL PostgreSQL MySQL Cosmos DB Microsoft IQ AI Data Engineering Database Administration Network Operations Systems Administration
2+ yrs exp Hybrid

Senior Cloud Solution Architecture

Microsoft

Washington, DC 4 days ago $106,400–$203,600
Azure SQL PostgreSQL AKS App Service AVS SAP Windows Linux Defender for Cloud Bicep ARM templates Terraform PowerShell Azure CLI CI/CD Infrastructure as Code CAF WAF AI workloads
4+ yrs exp