Senior Investigator

Job Overview

Microsoft’s Digital Crimes Unit (DCU) has an immediate opening for a highly qualified cybercrime investigator to immediately handle global investigations and drive high-impact disruption operations targeting sophisticated cybercriminal networks and online threat groups. DCU embodies Microsoft’s commitment to security and continues to innovate and evolve to combat the increasingly sophisticated actors operating in cyberspace. This role will focus on proactive, technical investigations of cyberattacks, fraud and scams, and other online threats directed at Microsoft’s customers and democratic institutions or abusing Microsoft’s products or services, including those leveraging Artificial Intelligence (AI) technology for malicious motives.

Microsoft’s Digital Crimes Unit

Microsoft’s DCU is a global team of attorneys, investigators, and analysts committed to leading the fight against cybercrime to protect our customers and promote global trust in Microsoft. Through strategic partnerships with Microsoft’s unparalleled threat intelligence community, fraud and abuse teams, and engineering support, DCU develops and employs innovative legal and technical strategies to detect, disrupt, and deter cybercrime, cyber-enabled fraud and scams, and other online threats. DCU sits in Customer Security & Trust (CST) within Microsoft’s Corporate, External, and Legal Affairs (CELA). DCU takes affirmative action to proactively defend against online threats and actors. Since its inception, DCU has filed lawsuits against over 35 malware families, state-sponsored actors, and the developers of cybercrime tools and services (including Cybercrime-as-a-Service platforms). (Link: https://www.youtube.com/watch?v=kHArmtKHAv8)

The Role

DCU is searching for a technically skilled investigator to join our agile and dedicated team. Ideal candidates should have a demonstrated interest in expanding their skills and expertise into new areas and cutting-edge technology, including AI, and commitment to the unique mission of DCU. AI has the potential to change the world, and Microsoft is committed to advancing ethical principles about its use and to identifying and combatting its misuse. Moreover, technology quickly changes, as do the threats and malicious activity. The candidate should be able to thrive in ambiguity, identify critical stakeholders, and deliver results under time constraints.

In this role, you will confront some of the most prolific cybercrimes, including ransomware and other malware, business email compromise (BEC) and account takeover attacks, tech support fraud, and the array of online scams, and some of the most sophisticated cyber actors, including financially motivated networks and state-sponsored groups. You will have the opportunity to work side-by-side and collaborate with world-class threat intelligence and security professionals, security engineers, and fraud and abuse analysts and investigators on investigations of complex cybercrime activity and to develop and compile evidence to build affirmative cases against criminal operations and cyber threat actors. You will serve as one of DCU’s investigative experts on cybercrime detection, identifying and mapping malicious technical infrastructure, preventing unauthorized access and misuse of Microsoft services, and protecting customers. Most significantly, you will make the online ecosystem a safer place for users globally.

• Identify and analyze data sources to uncover cybercrime patterns and trends targeting our services and customers
• Building proof-of-concept and prototype threat hunting tools, automations, and new capabilities
• Collaborate with security engineers and cross-company stakeholders to implement comprehensive investigative and enforcement strategies
• Lead and support complex fraud investigations involving cyber‑enabled financial crime, including online scams, business email compromise (BEC), payment fraud, account abuse, and related large‑scale fraud activity.
• Conduct analysis on large, complex data sets to detect and investigate anomalies, develop actionable insights and strategies
• Identify and map malicious technical infrastructure used to facilitate cybercrime
• Work independently to detect, investigate, and understand new and emerging cybercrime attack vectors
• Partner with DCU attorneys to develop legal strategies to disrupt and impact online criminal networks
• Drafting criminal referrals for law enforcement
• Provide expert witness testimony in court filings and proceedings

Required Qualifications

• Bachelor’s degree & demonstrable experience in cyber investigations, threat intelligence, or cyber defense operations.
<