Senior Applied AI Security Researcher

Overview

Microsoft Threat Protection Research is recruiting security professionals with experience and passion to apply AI techniques to protect customers. We are looking for a candidate to join the Microsoft Defender Experts research team to help us deliver Managed Security Services to our customers.

Responsibilities

As a Senior Applied AI Security Researcher, you will work with researchers and partners across Microsoft to apply AI techniques that help deliver Microsoft Defender Experts services. You will innovate new approaches for detecting and tracking threats, investigating attacks in customer environments, all in a rapidly evolving and cloud focused threat landscape.

Responsibilities include:

1. • Leverage AI techniques and security operations experience to explore and correlate large data sets to uncover novel attack techniques and hunting in enterprise customer environments.

1. • Partner with researchers and engineering teams, and Defender Experts analysts, to use AI to improve our service delivery outcomes.

1. • Use advanced techniques and in-the-wild data to identify, prioritize, and target complex security issues that cause negative impact to customers.

1. • Design and lead experiments in the use of AI to transform our managed services business.

Qualifications

Preferred Qualifications:

• • 4+ years experience in cybersecurity, software development lifecycle, large-scale computing, modeling, and/or anomaly detection
  • 4+ years of professional experience in investigating or researching cyber threats, understanding attacker methodology, tools, and infrastructure

• • • Excellent communication skills and investigative practices.
    • Experience in security research, incident response and attacker tradecraft.
    • Experience applying generative AI to the information security domain.
    • Experience creating solutions with a variety of large language models, understanding differences between models and how to compare them.
    • Experience with hosted AI tools such as Azure Foundry, Azure OpenAI Service.
    • Experience working with extremely large data sets, using tools and scripting languages like Excel, KQL, SQL, Python, Splunk, and Power BI.
    • Experience working with detection methodologies across multiple platforms.
    • Ability to utilize attacker uptake and impact to prioritize security detection and remediation tasks.
    • Experience with endpoint, cloud, network, and identity-based attacks and datasets.
    • Comprehensive OS security/internals knowledge.
    • Understanding of network protocols and analytical experience with network infrastructure data & telemetry.
    • Reverse-engineering with static and behavioral binary analysis experience.
    • Functional understanding of common threat analysis models such as the Diamond Model, Cyber Kill Chain, and MITRE ATT&CK.
    • Programming or scripting background (Python, PowerShell, C, C++, etc.) is a plus.

Security Research IC4 - The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $158,400 - $258,000 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
;br>
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.