| Microsoft Careers

What you'll do

• Translate emerging threats into actionable engineering requirements for AI-first solutions.
• Investigate advanced identity-based attacks like token theft and MFA bypass.
• Analyze large-scale telemetry to distinguish malicious activity from normal behavior.
• Design high-fidelity detections based on adversary invariants and abuse patterns.
• Contribute to automation and tooling that accelerates investigation at cloud scale.

What we're looking for

• Doctorate in a relevant field with 3+ years of experience or Master's with 4+ years of experience in software development, threat analysis, cybersecurity.
• Experience in security research, threat analysis, incident response, or detection engineering.
• Understanding of identity technologies including OAuth, OIDC, SAML, tokens, certificates/PKI, and MFA.
• Ability to analyze large-scale security telemetry using analytics platforms like Kusto or SQL.
• Skill in translating complex technical findings into clear guidance for engineers and stakeholders.