Senior Applied Threat Intelligence Analyst

Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end to end, simplified solutions. The Microsoft Security organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. 

Microsoft Security Research is looking for a Senior Applied Threat Intelligence Analyst with experience and passion applying threat intelligence to in-the-wild attacks as they help clients defend themselves against sophisticated attacks.

Are you passionate about protecting customers and helping them keep their enterprises secure against evolving cyber threats? Do you excel in operational excellence, delivering high-quality and effective security solutions? Would you like to be part of a global team of talented security researchers and threat analysts? If you would like to tackle these challenges and be part of a winning team, we have an opportunity for you!

Trillions of security signals are generated by customers looking to secure their environments from an ever-changing, dynamic threat environment. The Microsoft Defender Experts team dives deep into that data to identify threats that customers have not seen yet. Our job is to keep attackers on the defensive and help them be seen when they do attack.

Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Embody our Culture and Values

Responsibilities

As a Senior Applied Threat Intelligence Analyst, you will work with researchers and partners across Microsoft to apply our world-class threat intelligence to help deliver Microsoft Defender Experts services. You will innovate new approaches for detecting and tracking threats, adversaries, techniques, tools, and infrastructure, and new ways to find those threats in customer environments, in a rapidly evolving and cloud focused threat landscape.

Day-to-day responsibilities include:

• Exploring and correlating large data sets to uncover novel attack techniques, monitoring and cataloging changes in activity group tradecraft, and hunting in enterprise customer environments for signs of those attacker groups.
• Performing analysis of attacker activity in on-premises and cloud environments, connecting it to larger threat intelligence knowledgebases.
• Notifying customers regarding imminent attacker activity and providing recommendations to improve customers' cybersecurity posture.
• Using threat intelligence and in-the-wild data to identify, prioritize, and target complex security issues that cause negative impact to customers.
• Working with others to combine knowledge of attacks, attack trends, and threat intelligence context behind those attacks.
• Performing research into efficient and effective ways to use threat intelligence knowledge to improve Defender Experts service operations and inprove customer outcomes.

Qualifications

Required/Minimum Qualifications

• 5+ years experience in software development lifecycle, large-scale computing, modeling, cybersecurity, and/or anomaly detection

o OR Master's Degree in Statistics, Mathematics, Computer Science or related field.

• 5+ years of experience in tracking cyber threats and/or incident response and leveraging intelligence on attacker methodology, tools, and infrastructure.

Other Requirements 

Ability to meet Microsoft, customer and/or government security screening requirements are required for this