Senior Security Researcher - CTJ - Secret
Microsoft· Security Research
Redmond, WA, Reston, VA$119.8k - $234.7kFull-timePosted 3w ago
About the role
Senior Applied Intelligence Researcher role within Microsoft Threat Intelligence Center (MSTIC) operating at the intersection of threat intelligence and incident response. Responsible for applying threat intelligence to investigations, leading attribution, producing actionable intelligence, and supporting detection, response, and product improvements across Microsoft and customer environments.
Responsibilities
- Support high-impact investigations by providing threat intelligence expertise to proactive security research initiatives and reactive incident response engagements across Microsoft and customer environments.
- Lead attribution and threat actor analysis by collecting, modeling, attributing, and documenting intelligence gathered during investigations. Serve as the primary owner for attribution efforts while partnering with incident response teams responsible for forensics and customer engagement.
- Enable Microsoft Security teams by delivering actionable intelligence and attribution insights that support the detection, investigation, and remediation of advanced threats across Microsoft's security ecosystem.
- Drive product and service improvements by translating intelligence on adversary activity, exploitation techniques, and emerging attack trends into recommendations that strengthen the security of Microsoft's products and services.
- Identify and track emerging threats by discovering previously untracked adversary activity, developing new threat clusters into tracked actor groups, and conducting deep analysis across the Diamond Model and multiple Microsoft telemetry sources to advance Microsoft's understanding of the threat landscape.
- Communicate intelligence to diverse audiences through written reports, executive briefings, and customer-facing presentations. Support customer notifications related to imminent, ongoing, or impactful threat activity.
- Strengthen the intelligence feedback loop by ensuring insights gained during investigations, including novel capabilities, infrastructure, targeting patterns, and tradecraft, are rapidly shared with MSTIC tracking teams to improve detection, attribution, and future investigations.
Qualifications
- Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
- OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
- OR Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field
- OR equivalent experience.
Skills
Required:Threat intelligenceAttributionWritten and verbal communication
Last updated Oct 9, 2026. Interested? Apply on the company site.
About Microsoft
Cloud ComputingConsumer ElectronicsSoftwareTechnologyliquid-ai-recruiting-target
More open roles at Microsoft
- Senior Security Sales Specialist4d agoHybrid (Auckland) · Digital Solution Area Specialists
- Technical Program Manager4d agoRedmond, WA, Multiple Locations · Technical Program Management
- AI Business Solutions Specialist Manager - M365 Copilot / Agents / Dynamics 365 / Power Platform4d agoTokyo · Solution Area Specialists
- Senior Technical Program Manager4d agoRedmond, WA, Hybrid (Multiple Locations) · Technical Program Management
- Senior Subsea Project & Operations Manager4d agoTokyo, Japan · Sourcing Engineering