Principal Applied Threat Intelligence Manager

Microsoft

Confirmed live today High trust

Quick summary

Work type: On-site
Location: Redmond, WAReston, VA
Salary: $142,800–$274,800 / yr
Posted: 81 days ago
Freshness: Confirmed live today
Closes: Feb 2, 2027
Nearby: 99+ roles within 25 mi

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $191k

This role $209k

$127k $291k

below market most similar roles pay here above market

This role pays more than 70% of similar roles. Most pay $164,875–$216,262 — the blue band above. At the midpoint, this role pays about $209k versus about $191k for comparable roles.

Based on 240 similar postings.

Employer

About Microsoft

Microsoft Corporation is a global technology leader producing software, hardware, and cloud services including Windows, Office 365, Azure cloud platform, Xbox gaming, and Surface devices. Industry: Software & Cloud Computing

Microsoft currently has 694 open roles on FindRole.

Listed pay typically runs $119,800–$234,700 across 651 roles with salary data.

Most-posted roles

View all roles at Microsoft

At a glance

TL;DR · Principal Applied Threat Intelligence Manager

Role Posting Log in to save

The Principal Applied Threat Intelligence Manager leads a team of Applied Threat Intelligence analysts to understand the threat landscape and latest attacker tradecraft using AI. The manager tracks threat actors, including financially motivated groups, by analyzing their infrastructure, targets, and shifting techniques, tactics, and procedures. Key responsibilities include translating complex technical findings into prescriptive guidance for security operations teams, executives, and the broader defender community while mentoring analysts and contributing to tradecraft standards. The role requires expertise in threat hunting, incident response, and reverse-engineering with static and behavioral binary analysis. Necessary skills include programming in Python, PowerShell, C#, or C++, and experience with large language models, network protocols, and frameworks like MITRE ATT&CK and the Diamond Model to defend against endpoint, cloud, network, and identity-based attacks.

Skills

Cyber Threat Intelligence AI Large Language Models Python PowerShell C# C++ MITRE ATT&CK Cyber Kill Chain Diamond Model Threat Hunting Incident Response Reverse-engineering Network Protocols Vulnerability Research Anomaly Detection

What you'll do

Manage a team of Applied Threat Intelligence analysts to lead AI-driven threat landscape analysis.
Track threat actors, their infrastructure, targets, and shifting tactics, techniques, and procedures.
Translate complex technical findings into prescriptive guidance for security operations and executives.
Mentor analysts and contribute to tradecraft, analytic standards, and team-wide knowledge sharing.
Produce finished threat intelligence reporting for technical and executive audiences.
Create threat group attributions and communicate assessments to internal stakeholders and customers.
Build AI agents and skills for information security applications and pipelines.
Perform reverse-engineering using static and behavioral binary analysis.

What we're looking for

Verification of U.S. citizenship is required.
Doctorate in a relevant field and 5+ years of experience in software development, threat analysis, or cybersecurity.
Master's Degree in a relevant field and 8+ years of experience in software development, threat analysis, or cybersecurity.
Bachelor's Degree in a relevant field and 12+ years of experience in software development, threat analysis, or cybersecurity.
3+ years of people management and/or informal team leadership experience.
10+ years of experience in cyber threat intelligence, threat hunting, incident response, or a related security discipline.
Experience tracking and defending against financially motivated threat actors.
Experience with AI tools and large language models for information security applications and pipelines.

Similar roles

Senior Manager, Cyber Threat Research & Intelligence

Adobe

San Jose, CA +2 39 days ago $150,700–$306,625

MITRE ATT&CK YARA Sigma SIEM SOAR TIP OSINT Malware Analysis Kill Chain Diamond Model Structured Analytic Techniques Incident Response Detection Engineering

8+ yrs exp

Save

Senior Applied Threat Intelligence Analyst

Microsoft

87 days ago $119,800–$234,700

Cyber Threat Intelligence Microsoft Sentinel Microsoft Defender XDR Python KQL SQL PowerShell C# C++ MITRE ATT&CK Cyber Kill Chain Diamond Model Malware Analysis Reverse Engineering SIEM XDR Network Protocols OS Internals

4+ yrs exp Hybrid

Save

Senior Cybersecurity Analyst, Cyber Threat Intelligence

Target

Remote (Brooklyn Park, MN) 19 days ago $88,000–$158,000

Cyber Threat Intelligence MITRE ATT&CK Cyber Kill Chain Diamond Model VirusTotal VMRay DomainTools URLScan Maltego Analyst Notebook Malware Analysis Threat Hunting Incident Response Structured Analytic Techniques Infrastructure Analysis Indicator Development

3+ yrs exp Remote

Save

Cyber Threat Intelligence Analyst

Leidos

Washington, DC +2 48 days ago

Cyber Threat Intelligence MITRE ATT&CK Splunk Python Incident Response Threat Hunting Malware Analysis CrowdStrike Falcon Tanium Proofpoint TAP Zscaler Bash PowerShell C++ HTML XML Cyber Kill Chain Diamond Model Structured Analytic Technique Forensics

8+ yrs exp

Save

Cyber Threat Intelligence US Lead

S&P Global

New York, NY 5 days ago

Cyber Threat Intelligence OSINT MITRE ATT&CK Diamond Model Kill Chain Malware Analysis Reverse Engineering Digital Forensics Threat Hunting GCTI SANS FOR578

3+ yrs exp

Save

Cyber Threat Hunter

Booz Allen Hamilton

McLean, VA 7 days ago $69,400–$158,000

Threat Hunting MITRE ATT&CK EDR XDR SIEM KQL Python PowerShell Digital Forensics Incident Response SentinelOne CrowdStrike Falcon Palo Alto Cortex XDR Microsoft Defender for Endpoint Microsoft Sentinel Cyber Threat Intelligence

3+ yrs exp

Save