[Hiring] Principal Security Researcher @Microsoft

Role Description

We are looking for a Principal Security Researcher to join our team. The mission of the MSTIC team is to make Microsoft threat intelligence the first place for authoritative, high-quality knowledge on threats. The MSTIC team provides context on the threats that impact customers and owns the single voice of threat intelligence for Microsoft through a central content source. The MSTIC team supports customer-facing services with threat intelligence fusion and customer-ready content. The team also supports the Microsoft Defender for Threat intelligence library content and public-facing content in the Microsoft Threat Intelligence blog.

Responsibilities include:

• Researching, analyzing, and contextualizing cybercrime related threat actor, tool, technique and vulnerability related threat intelligence.
• Writing customer-facing profiles on the latest cybercrime threats.
• Creating briefings and briefing internal and external teams on the latest security threats.
• Adapting your writing style to create new content based on business needs and customer feedback.

Qualifications

• Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR
• Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR
• Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 6+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR equivalent experience.

Requirements

• This position requires verification of citizenship due to citizenship-based legal restrictions.
• Ability to meet Microsoft, customer and/or government security screening requirements.
• Microsoft Cloud Background Check: This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Additional or Preferred Qualifications

• 5+ years experience in software development lifecycle, large-scale computing, modeling, cybersecurity, and/or anomaly detection OR Master's Degree in Statistics, Mathematics, Computer Science or related field.
• Identifies, conducts, and supports others in conducting research into critical security areas, such as cybercrime, current attacks, adversary tracking, and the broader cyber security landscape.
• Partners cross-functionally to research the latest attacks.
• Advocates priorities and demonstrates judgment in identifying projects and priorities.
• Understands interplay across Microsoft technologies and how they give rise to attacker opportunities.
• Works with others to synthesize research findings into recommendations for mitigation of security issues.
• Experience with research and analyzing cybercrime threats and actors, including phishing, commodity malware, and ransomware.
• Experience writing customer-facing threat intelligence products.
• Experience writing on threat actors and their activities, malicious tools, common techniques, and vulnerabilities.

Compensation

The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Equal Opportunity Employer

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances.