← All roles

Insider Risk Investigator - CTJ - Top Secret

Microsoft· Security Operations Engineering
Apply on company site
Hybrid (Multiple Locations)$119.8k - $234.7kFull-timePosted 4d ago

About the role

Lead complex insider risk investigations spanning on-premises, cloud, and endpoint systems; apply advanced analytical, forensic, and detection engineering techniques to identify, assess, and contain insider-driven risks to Microsoft’s people, data, and intellectual property. Coordinate response actions, manage case communication, ensure evidence integrity and governance compliance, and contribute to evolving insider risk detection and response capabilities.

Responsibilities

  • Execute the end-to-end investigative cycle, including evidence development, technical analysis, and documentation of findings using established investigative standards.
  • Ensure investigative work products are complete, defensible, and consistent with program expectations for rigor, evidentiary integrity, and due process.
  • Contribute to translating technical investigative activity into clear, structured findings and insights for stakeholders
  • Partner with technical subject matter experts to identify, access, and interpret relevant data sources for investigative use.
  • Contribute to the development and refinement of detection logic, investigative triggers, and signal quality to improve investigative outcomes
  • Apply technical expertise to support root cause analysis and evidence-based conclusions across complex investigations.
  • Collaborate closely with investigators, legal, HR, security, and compliance partners to support coordinated, cross-functional investigations.
  • Ensure alignment with established processes and minimize duplication of investigative effort across teams.
  • Contribute to a culture of investigative rigor, accountability, and professional excellence.
  • Ebody our company's Culture and Values

Qualifications

  • Doctorate in Statistics, Mathematics, Computer Science, or related field
  • OR Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, SOC detection, threat analytics, SIEM, IT, or operations incident response
  • OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, SOC detection, threat analytics, SIEM, IT, or operations incident response
  • OR equivalent experience.

Skills

Required:Investigation managementTechnical analysisDetection engineeringCross-functional collaborationData source interpretationRegulatory & evidentiary standards
Nice to have:Root cause analysis

Benefits

  • Security Clearance Requirements: active U.S. Government Top Secret Security Clearance
  • Microsoft Cloud Background Check every two years
  • Citizenship verification due to citizenship-based restrictions
  • Potential eligibility for benefits and other compensation as per location
Last updated Oct 23, 2026. Interested? Apply on the company site.

About Microsoft

Cloud ComputingConsumer ElectronicsSoftwareTechnologyliquid-ai-recruiting-target
Company profileWebsite

More open roles at Microsoft