Senior & Principal Security Researcher

What you'll do

• Perform deep analysis of attacker activity in on-premises and cloud environments.
• Identify potential threats to enable proactive defense before incidents occur.
• Notify customers regarding imminent attacker activity and provide cybersecurity posture recommendations.
• Build proof-of-concept threat hunting tools, automations, and new security capabilities.
• Drive product and tooling improvements by conveying research findings to engineering teams.
• Discover, track, and disrupt priority threat actors and manage specific actor portfolios.
• Hunt and enrich detections using advanced telemetry to enhance security products.
• Integrate threat intelligence into products and execute disruption actions.

What we're looking for

• Must have a Doctorate in a relevant field with 3+ years of experience, a Master's with 3+ years, or a Bachelor's with 4+ years of experience.
• Must have equivalent experience to the specified degree and years of experience requirements.
• Must provide proof of citizenship or U.S. permanent residency for export control regulations.
• Must be able to pass a Microsoft background check and a Microsoft Cloud background check every two years.
• Proven knowledge of security fundamentals across Microsoft platforms (Client, Server, Cloud) (preferred).
• Strong understanding of malware and the modern threat landscape, especially identity-based attacks (preferred).
• Familiarity with SQL, Kusto Query Language (KQL), or other large database/SIEM query languages (preferred).
• Experience with forensic analysis tools, threat actor evidence (IOCs, IOAs, TTPs), and forensic log artifacts (preferred).