Principal Security Researcher | Microsoft Careers

What you'll do

• Design and execute purple team simulations to emulate real-world threats using both human-driven and AI models.
• Analyze detection coverage and response effectiveness by partnering with engineering and threat intelligence teams.
• Use Kusto/KQL to validate detection logic, uncover gaps, and measure signal quality at scale.
• Translate attacker tradecraft into actionable insights for defenders, including detection recommendations and investigation improvements.
• Design and leverage agentic systems to automate simulation workflows and accelerate post-simulation analysis.

What we're looking for

• 8+ years of experience in incident response, threat hunting, and SOC operations.
• Advanced knowledge of MITRE ATT&CK framework and threat modeling methodologies.
• Experience with large-scale computing, software development lifecycle, and cybersecurity research.
• Proficiency in analyzing telemetry using Kusto/KQL for detection validation and gap identification.
• Security certifications such as GCIA, GMON, GCIH, or CISA.