15 hours ago
Remote, United Kingdom +2 moreStaff+
Responsibilities
- Perform deep analysis of attacker activity in on-premises and cloud environments.
- Identify potential threats and notify customers about imminent attacker activity.
- Provide recommendations to improve customers’ cybersecurity posture and deliver threat intelligence knowledge transfer.
- Build proof-of-concept and prototype threat-hunting tools, automations, and new capabilities.
- Drive product and tooling improvements by sharing threat-hunting and incident-response findings with engineering teams.
- Identify, prioritize, and target complex security issues, then create and drive adoption of mitigations and proactive guidance.
- Synthesize research findings into mitigation recommendations and share them across teams.
Requirements
- Bachelor’s, master’s, or PhD in statistics, mathematics, computer science, computer security, or a related field, or equivalent experience.
- Experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
- Knowledge of security fundamentals across Microsoft client, server, and cloud platforms.
- Understanding of malware, the modern threat landscape, and identity-based attacks.
- Familiarity with SQL, Kusto Query Language, or comparable SIEM query languages such as Splunk, Humio, or Kibana.
- Familiarity with Jupyter Notebooks or equivalent threat-hunting automations built with scripting languages.
- Experience analyzing threat-actor evidence, including IOCs, IOAs, and TTPs.
- Experience using forensic analysis tools such as X-Ways Forensics, WinHex, Encase, or FTK.
- Experience with forensic log artifacts in SIEM, web server, antivirus, protection, HIDS, and NIDS logs.
Benefits
- The role may be eligible for benefits and other compensation.
- The typical base pay range is £93,500.00–£161,800.00 per year in the United Kingdom.
- Applications are accepted on an ongoing basis until the position is filled, with the posting open for a minimum of five days.
About Microsoft
Microsoft develops operating systems, productivity software, cloud services, developer tools, and consumer devices for individuals, enterprises, and governments. Its main products include Windows, Microsoft 365, Azure, Visual Studio/GitHub, Xbox, and LinkedIn; revenue comes from software subscriptions and licenses, cloud consumption, hardware sales, and advertising. Founded in 1975 and headquartered in Redmond, Washington, Microsoft is a public company traded on Nasdaq.