Security Analyst II

Microsoft

Confirmed live today High trust
Hybrid

Quick summary

Work type
Hybrid
Location
—
Salary
$102,100–$202,200 / yr
Posted
9 days ago
Freshness
Confirmed live today
Closes
Apr 4, 2027

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $135k
This role $152k
$90k $214k
below market most similar roles pay here above market

This role pays more than 74% of similar roles. Most pay $114,994–$155,550 — the blue band above. At the midpoint, this role pays about $152k versus about $135k for comparable roles.

Based on 240 similar postings.

Employer

About Microsoft

Microsoft Corporation is a global technology leader producing software, hardware, and cloud services including Windows, Office 365, Azure cloud platform, Xbox gaming, and Surface devices. Industry: Software & Cloud Computing

Microsoft currently has 661 open roles on FindRole.

Listed pay typically runs $119,800–$234,700 across 633 roles with salary data.

Most-posted roles

View all roles at Microsoft

At a glance

TL;DR · Security Analyst II

The Security Analyst II joins the Cyber Defense Investigations team to lead deep-dive investigations into complex security incidents involving cloud, identity, endpoint, and supply chain compromises. Working within the CDI Escalations team, you will perform root cause analysis, conduct proactive threat hunting, and author detections at rapid speed to mitigate advanced threats. You will utilize Kusto (KQL), Defender, Entra ID, Azure, and other Microsoft telemetry sources to identify adversaries and develop investigative queries, playbooks, and automation. The role requires translating findings into actionable security improvements and producing technical reports. Key competencies include threat modeling, anomaly detection, and experience with the MITRE ATT&CK framework. You will collaborate with engineering and response teams to solve difficult security challenges across various enterprise environments and software package ecosystems.

What you'll do

  • Investigate complex security incidents involving cloud, identity, endpoint, and supply chain compromises.
  • Author security detections at a rapid speed to address emerging threats.
  • Conduct root cause analysis, impact assessments, and scope determination for security incidents.
  • Perform proactive threat hunting using Kusto (KQL), Defender, Entra ID, and Azure telemetry.
  • Develop investigative queries, hunting content, playbooks, and automation to improve operational efficiency.
  • Translate investigation findings into actionable security improvements, detections, and process enhancements.
  • Produce clear technical and executive-ready investigation reports.
  • Mentor peers and contribute to investigative best practices and knowledge sharing.

What we're looking for

  • Master's Degree in Statistics, Mathematics, Computer Science, or related field and 1+ year of relevant experience.
  • Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field and 2+ years of relevant experience.
  • Equivalent experience to the degree and years of experience requirements.
  • Experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, SOC detection, threat analytics, SIEM, IT, or operations incident response.
  • Ability to pass a Microsoft Cloud background check.
  • Experience with Sentinel or other detection authoring tools (preferred).
  • Experience investigating security incidents in cloud or enterprise environments (preferred).
  • Experience using KQL/Kusto, SQL, or similar query languages for log analysis (preferred).

More like this

Similar roles

Security Researcher II

Microsoft

65 days ago $102,100–$202,200
Threat Intelligence Kusto Query Language (KQL) SQL Azure Azure DevOps GitHub Jupyter Notebooks Splunk Humio Kibana Windows Linux macOS anomaly*detection Vulnerability Research
2+ yrs exp Hybrid

Security Operations Center (SOC) Analyst II

General Dynamics

Bossier City, LA 36 days ago $76,565–$97,075
SOAR SIEM EDR XDR Splunk Microsoft Defender Microsoft Intune Entra ID Palo Alto Networks AWS Azure GCP Machine Learning AI MITRE ATT&CK TCP/IP NIST FISMA FedRAMP Incident Response Threat Hunting
3+ yrs exp Hybrid

Senior Applied Threat Intelligence Analysts

Microsoft

77 days ago $102,100–$202,200
Cyber Threat Intelligence Microsoft Sentinel Microsoft Defender XDR Python PowerShell C# C++ AI Large Language Models MITRE ATT&CK Cyber Kill Chain Diamond Model Reverse-engineering Behavioral Binary Analysis Network Protocols Anomaly Detection Software Development Lifecycle
6+ yrs exp Hybrid

Senior Detection Portfolio Engineer

Microsoft

Remote 16 days ago $119,800–$234,700
Kusto KQL Python SIEM MITRE ATT&CK Threat Modeling Anomaly Detection LLM-based workflows Jupyter Synapse SOC Incident Response Automation Data Lakes Software Development Lifecycle Threat Analytics
4+ yrs exp Remote

Senior Security Researcher

Microsoft

10 days ago $119,800–$234,700
Threat Intelligence Incident Response KQL Kusto SQL Sentinel Defender XDR Azure Resource Graph MDC Cybersecurity Vulnerability Research Anomaly Detection Data Science AI Network Forensics Log Analysis SIEM OAuth Diamond Model
4+ yrs exp Hybrid

Senior Applied Threat Intelligence Analyst

Microsoft

76 days ago $119,800–$234,700
Cyber Threat Intelligence Microsoft Sentinel Microsoft Defender XDR Python KQL SQL PowerShell C# C++ MITRE ATT&CK Cyber Kill Chain Diamond Model Malware Analysis Reverse Engineering SIEM XDR Network Protocols OS Internals
4+ yrs exp Hybrid