← All roles

Senior Security Researcher

Microsoft· Security Research
Apply on company site
Redmond, WA$119.8k - $234.7kfull-timePosted 2w ago

About the role

Senior Security Researcher on the Cloud Apps and Identity Research (CAIR) team focusing on protecting identities and SaaS applications (e.g., Okta, Salesforce) through threat research, AI-enabled research workflows, and scalable protection.

Responsibilities

  • Research third-party identity and SaaS attacks: Research attacker tradecraft and emerging threats targeting identities, applications, authentication flows, sessions, privileges, and data across third-party identity providers and SaaS platforms, including Okta and Salesforce.
  • Translate threat research into protection: Convert security research, incidents, customer reports, and threat-landscape intelligence into clear attack scenarios, telemetry requirements, detection opportunities, investigation logic, and durable protection strategies.
  • Build AI agents for security research: Design and develop RAG-based agents that retrieve and reason over product documentation, schemas, threat intelligence, prior research, code, telemetry, and operational knowledge to support security-research workflows.
  • Develop coding and detection-authoring agents: Build coding agents that help generate, review, refine, and maintain security analytics, KQL queries, detection logic, test cases, and related research artifacts with appropriate human oversight.
  • Create evaluation frameworks: Define representative datasets, scenarios, benchmarks, and scoring methods to evaluate agent accuracy, completeness, groundedness, robustness, and security-research usefulness.

Qualifications

  • Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
  • OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
  • OR equivalent experience.

Skills

Required:Identity and SaaS threat researchThreat-to-protection translationAI agents development (RAG-based)Coding/detection-authoring agentsEvaluation framework design
Last updated Oct 9, 2026. Interested? Apply on the company site.

About Microsoft

Cloud ComputingConsumer ElectronicsSoftwareTechnologyliquid-ai-recruiting-target
Company profileWebsite

More open roles at Microsoft