Cybercrime Investigator

Microsoft’s Digital Crimes Unit (DCU) is hiring a Cybercrime Investigator to lead global investigations and disruption operations against sophisticated cybercriminal networks and online threat groups. This role conducts proactive technical investigations into cyberattacks, fraud, scams, and other threats targeting Microsoft customers and democratic institutions—or abusing Microsoft products and services, including the malicious use of AI.

 Microsoft’s Digital Crimes Unit 

DCU is a global team of attorneys, investigators, and analysts that works to protect customers and strengthen trust in Microsoft. With support from Microsoft threat intelligence, fraud and abuse teams, and engineers, DCU uses legal and technical strategies to detect, disrupt, and deter cybercrime, cyber-enabled fraud, scams, and other online threats. DCU sits in Customer Security & Trust (CST) within Corporate, External, and Legal Affairs (CELA).

DCU proactively defends against online threats. Since its inception, DCU has filed lawsuits against 35+ malware families, state-sponsored actors, and developers of cybercrime tools and services (including Cybercrime-as-a-Service platforms): https://www.youtube.com/watch?v=kHArmtKHAv8.

 The Role

Success in this role requires commitment to DCU’s mission and continuous learning in emerging technology, including AI. You should thrive in ambiguity, identify the right stakeholders, and deliver results under tight timelines. Microsoft is committed to advancing ethical AI and combating its misuse.

You will investigate high-impact cybercrimes such as ransomware and other malware, business email compromise (BEC) and account takeovers, tech support fraud, and other online scams—often involving financially motivated networks and state-sponsored groups. You will partner with threat intelligence, security engineers, and fraud and abuse teams to investigate complex activity, map malicious infrastructure, and build evidence for affirmative cases. As a DCU investigative expert, you will help prevent misuse of Microsoft services, protect customers, and improve safety across the online ecosystem.

Microsoft’s mission is to empower every person and organization to achieve more. Our Culture promotes a growth mindset so teams and leaders can do their best work. Join us and help shape what’s next.

• Identify and analyze data sources to uncover cybercrime patterns and trends targeting our services and customers
• Building proof-of-concept and prototype threat hunting tools, automations, and new capabilities
• Collaborate with security engineers and cross-company stakeholders to implement comprehensive investigative and enforcement strategies
• Lead and support complex fraud investigations involving cyber‑enabled financial crime, including online scams, business email compromise (BEC), payment fraud, account abuse, and related large‑scale fraud activity.
• Conduct analysis on large, complex data sets to detect and investigate anomalies, develop actionable insights and strategies
• Identify and map malicious technical infrastructure used to facilitate cybercrime
• Work independently to detect, investigate, and understand new and emerging cybercrime attack vectors
• Partner with DCU attorneys to develop legal strategies to disrupt and impact online criminal networks
• Drafting criminal referrals for law enforcement
• Provide expert witness testimony in court filings and proceedings
• Embody our culture and 

  Apply for this role

  Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.

  Apply Now →Generate Application Kit

  Free account required — sign up in 30s

  Report an issue

  Company

  Microsoft

  View company profile →