Senior Applied Threat Intelligence Analyst

Microsoft

Confirmed live today High trust
Hybrid

Quick summary

Work type
Hybrid
Location
—
Salary
$119,800–$234,700 / yr
Posted
87 days ago
Freshness
Confirmed live today
Closes
Jan 27, 2027

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $167k
This role $177k
$106k $248k
below market most similar roles pay here above market

This role pays more than 64% of similar roles. Most pay $138,500–$195,621 — the blue band above. At the midpoint, this role pays about $177k versus about $167k for comparable roles.

Based on 240 similar postings.

Employer

About Microsoft

Microsoft Corporation is a global technology leader producing software, hardware, and cloud services including Windows, Office 365, Azure cloud platform, Xbox gaming, and Surface devices. Industry: Software & Cloud Computing

Microsoft currently has 694 open roles on FindRole.

Listed pay typically runs $119,800–$234,700 across 651 roles with salary data.

Most-posted roles

View all roles at Microsoft

At a glance

TL;DR · Senior Applied Threat Intelligence Analyst

The Senior Applied Threat Intelligence Analyst joins the Applied Threat Intelligence Production team within Microsoft Security Research. In this role, you will transform raw telemetry into actionable, customer-facing intelligence to defend against sophisticated threat actors. Your daily responsibilities include authoring high-impact reports on actor profiles, campaign analyses, and TTP deep-dives while building pipelines and workflows to stream intelligence at machine speed. You will operationalize findings into platforms like Defender XDR and Sentinel, representing the company in industry conferences and briefings. Key technical requirements include experience with Python, KQL, SQL, and PowerShell, alongside knowledge of OS internals, network protocols, and malware analysis. You must apply frameworks like MITRE ATT&CK and the Diamond Model to analyze endpoint, cloud, identity, and network telemetry.

What you'll do

  • Author and publish high-impact threat intelligence reports including actor profiles, campaign analyses, and TTP deep-dives.
  • Build and refine pipelines, tooling, and workflows to stream cyber threat intelligence to customers at machine speed.
  • Translate complex technical findings into clear, actionable insights for security operations teams and technical stakeholders.
  • Partner with product and engineering teams to operationalize intelligence into Microsoft security platforms like Defender XDR and Sentinel.
  • Represent Microsoft Threat Intelligence in customer briefings, industry conferences, and cross-industry working groups.
  • Support customer engagements by providing accurate and timely intelligence insights during briefings and discussions.
  • Contribute to scalable workflows that improve how threat intelligence is generated, refined, and delivered.

What we're looking for

  • Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or a related field.
  • Master's Degree in a related field and 3+ years of experience in software development, threat analysis, or cybersecurity.
  • Bachelor's Degree in a related field and 4+ years of experience in software development, threat analysis, or cybersecurity.
  • Equivalent experience to the educational and experience requirements.
  • Ability to pass Microsoft and Microsoft Cloud background checks.
  • 5+ years of experience in cyber threat intelligence, threat hunting, incident response, or a related security discipline (preferred).
  • Demonstrated experience producing finished threat intelligence reporting for technical audiences (preferred).
  • Experience with Microsoft Sentinel, Microsoft Defender XDR, and scripting tools like Python or KQL (preferred).

More like this

Similar roles

Principal Applied Threat Intelligence Manager

Microsoft

Redmond, WA +1 81 days ago $142,800–$274,800
Cyber Threat Intelligence AI Large Language Models Python PowerShell C# C++ MITRE ATT&CK Cyber Kill Chain Diamond Model Threat Hunting Incident Response Reverse-engineering Network Protocols Vulnerability Research Anomaly Detection
10+ yrs exp

Senior Threat Intelligence Investigator

Oracle

Nashville, TN +1 151 days ago $104,200–$234,600
Threat Intelligence OSINT Incident Response Malware Analysis YARA Snort Suricata Bro Zeek OCI Windows UNIX Linux macOS SOC Digital Forensics
3+ yrs exp

Senior Security Researcher

Microsoft

21 days ago $119,800–$234,700
Threat Intelligence Incident Response KQL Kusto SQL Sentinel Defender XDR Azure Resource Graph MDC Cybersecurity Vulnerability Research Anomaly Detection Data Science AI Network Forensics Log Analysis SIEM OAuth Diamond Model
4+ yrs exp Hybrid

Security Analyst II

Microsoft

20 days ago $102,100–$202,200
KQL Kusto Defender XDR Sentinel Azure Entra ID SQL SIEM MITRE ATT&CK Threat Hunting Root Cause Analysis Security Automation GitHub npm Software Development Lifecycle Anomaly Detection
2+ yrs exp Hybrid

Senior Threat Intelligence Analyst

JLL (Jones Lang LaSalle)

Remote (Chicago, IL) +7 1 day ago $170,000–$200,000
Threat Intelligence EDR SIEM TIP IPS WAF MITRE ATT&CK NIST 800-53 ISO 27001 CIS AI SOC IR Detection Engineering Cybersecurity
5+ yrs exp Remote

Senior Threat Intelligence Engineer

Coinbase

Remote 13 days ago $180,370–$212,200
Threat Intelligence Python Go SQL OSINT Incident Response Security Research Cyber Investigations Data Analysis Scripting Vertex Synapse Threat Intelligence Platform
5+ yrs exp Remote