• Support high-impact investigations by providing threat intelligence expertise to both proactive security research initiatives and reactive incident response engagements across Microsoft and customer environments.
• Lead attribution and threat actor analysis by collecting, modeling, attributing, and documenting intelligence gathered during investigations. Serve as the primary owner for attribution efforts while partnering with incident response teams responsible for forensics and customer engagement.
• Enable Microsoft Security teams by delivering actionable intelligence and attribution insights that support the detection, investigation, and remediation of advanced threats across Microsoft's security ecosystem.
• Drive product and service improvements by translating intelligence on adversary activity, exploitation techniques, and emerging attack trends into recommendations that strengthen the security of Microsoft's products and services.
• Identify and track emerging threats by discovering previously untracked adversary activity, developing new threat clusters into tracked actor groups, and conducting deep analysis across the Diamond Model and multiple Microsoft telemetry sources to advance Microsoft's understanding of the threat landscape.
• Communicate intelligence to diverse audiences through written reports, executive briefings, and customer-facing presentations. Support customer notifications related to imminent, ongoing, or impactful threat activity.
• Strengthen the intelligence feedback loop by ensuring insights gained during investigations, including novel capabilities, infrastructure, targeting patterns, and tradecraft, are rapidly shared with Microsoft Threat Intelligence Center (MSTIC) tracking teams to improve detection, attribution, and future investigations.

Required/Minimum Qualifications

Security Research IC4 - The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $160,200 - $261,000 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.