This role pays less than
56%
of similar roles. Most pay
$136,200–$195,000
— the shaded band above.
At the midpoint, this role pays about
$152k
versus about
$166k
for comparable roles.
Based on 239 similar postings.
Employer
About Microsoft
Microsoft Corporation is a global technology leader producing software, hardware, and cloud services including Windows, Office 365, Azure cloud platform, Xbox gaming, and Surface devices. Industry: Software & Cloud Computing
Microsoft currently has
598 open roles
on FindRole.
Listed pay typically runs
$119,800–$234,700
across 586 roles with salary data.
Senior Applied Threat Intelligence Analysts join the Applied Threat Intelligence team within Microsoft Security Research to defend against sophisticated threat actors. In this role, you will track threat actor infrastructure and shifting tactics while translating complex technical findings into actionable guidance for security operations teams and executives. You will build and refine pipelines, tooling, and workflows to stream cyber threat intelligence at machine speed. The work involves identifying financially motivated actors and addressing threats across endpoint, cloud, network, and identity-based datasets. Key skills include experience with AI tools, large language models, and programming in Python, PowerShell, C#, or C++. You will utilize frameworks like MITRE ATT&CK and the Diamond Model while performing reverse engineering and binary analysis to solve critical security challenges within a complex, heterogeneous environment for diverse customers.
Use AI to analyze the threat landscape and identify the latest attacker tradecraft.
Track threat actors, their infrastructure, targets, and evolving tactics, techniques, and procedures.
Translate complex technical findings into clear, prescriptive guidance for security operations teams and executives.
Collaborate with internal teams to deliver high-quality intelligence through customer-facing platforms and managed services.
Build and refine pipelines, tools, and workflows to stream cyber threat intelligence at machine speed.
Represent Microsoft Threat Intelligence at customer briefings, industry conferences, and cross-industry working groups.
What we're looking for
A relevant degree in Statistics, Mathematics, Computer Science, or Computer Security is required, with experience levels varying based on the level of education.
Candidates must have 3+ years of experience for a Doctorate, 4+ for a Master's, or 6+ for a Bachelor's in technical fields like cybersecurity or software development.
Ability to pass Microsoft and Microsoft Cloud background checks is required.
Experience in cyber threat intelligence, threat hunting, incident response, or related security disciplines is preferred.
Experience with attribution, producing finished threat intelligence reports, and tracking financially motivated actors is preferred.
Proficiency with Microsoft Sentinel, Microsoft Defender XDR, and other comparable SIEM/XDR platforms is preferred.
Knowledge of adversary tradecraft, the cyber kill chain, MITRE ATT&CK, Diamond Model, and structured analytic techniques is preferred.
Technical skills in programming (Python, PowerShell, C#, C++), reverse engineering, OS internals, and AI tools are preferred.
Threat Intelligence
AI
Large Language Models
MITRE ATT&CK
Cyber Kill Chain
Diamond Model
Python
PowerShell
C#
C++
Reverse-engineering
Anomaly Detection
Vulnerability Research
Network Protocols
Incident Response