← All roles

Senior Security Researcher

Microsoft· Security Research
Apply on company site
Sydney, NSW, Australia, Melbourne, VIC, Australia, Canberra, ACT, Australia, Perth, WA, Australia, Multiple Locations, New ZealandFull-timePosted 1mo ago

About the role

Senior security researcher within the Applied Intelligence team applying MSTIC threat intelligence to live investigations, collaborating across incident response, threat intelligence, and product groups to defend Microsoft and its customers against advanced adversaries.

Responsibilities

  • Investigation support. Providing threat intelligence support to proactive security research and reactive incident response engagements across both internal and customer-facing investigations.
  • Attribution and actor modeling. Ingesting, modeling, attributing, and documenting intelligence collected during engagements. Owning the attribution lane while investigation partners lead forensics and customer response.
  • Supporting Partner Teams: Providing attribution analysis and intelligence support to Microsoft Security partner teams investigating and responding to threats.
  • Product Improvements: Ensuring observations of threat actor exploitation of Microsoft products and services translate into product improvements.
  • Emerging threats: Discovering untracked clusters of activity with novel capabilities, developing them into tracked threat groups through in-depth research across the Diamond Model and multiple Microsoft telemetry sources, and helping Microsoft stay on top of the latest and newest threats.
  • Briefing and delivery: Delivering threat intelligence briefings to external customers and internal stakeholders. Supporting notifications to customers regarding imminent or ongoing attacker activity.
  • Feedback loop: Ensuring intelligence collected during reactive investigations—novel capabilities, infrastructure, targeting, or tradecraft — is promptly collated and surfaced back to Microsoft's actor tracking teams in MSTIC.

Qualifications

  • Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR equivalent experience.
  • Outstanding technical knowledge of adversary capabilities, infrastructure, and techniques, and the ability to develop new methods to discover and track them.
  • Experience tracking advanced financially motivated or state-sponsored adversaries using the Diamond Model; ability to characterize TTPs, infrastructure, and operational campaigns.
  • Demonstrated experience producing actionable intelligence that changed the outcome of an investigation or hardened a defended network.
  • Familiarity with host, log, and network forensics, common protocols, and a range of adversary command-and-control methods.
  • Demonstrated experience with log analysis and query languages (KQL/Kusto, SQL, or equivalent) across SIEM, identity, endpoint, or cloud telemetry.
  • Experience with large-scale cloud, identity, and endpoint telemetry.
  • Experience supporting incident response and familiarity with common IR procedures and tooling.
  • Ability to communicate findings clearly, with appropriate confidence language, to technical and executive audiences.

Skills

Required:Threat intelligenceIncident responseDiamond ModelLog analysis
Nice to have:Forensics

Benefits

  • Microsoft benefits package as applicable (not detailed in description).
Last updated Sep 24, 2026. Interested? Apply on the company site.

About Microsoft

Cloud ComputingConsumer ElectronicsSoftwareTechnologyliquid-ai-recruiting-target
Company profileWebsite

More open roles at Microsoft