Back to jobsJob overview

About the role

Senior Security Researcher at Microsoft

Required Skills

pythonpowershellgocloud securityred-teammitre att&ckllmadversary simulation

About the Role

Senior Security Researcher role focused on designing and automating full-scope attack chains across cloud and endpoints. Responsibilities include codifying techniques into playbooks, generating telemetry for detection research, and collaborating with scientists to develop defensive insights. The role requires hands-on red-team experience and expertise in identity, cloud, and endpoint security.

Key Responsibilities

  • Discover and prototype new adversary techniques across identity, Windows endpoints, and cloud services
  • Codify techniques into reusable code modules and end-to-end attack playbooks
  • Build and maintain safe execution pipelines for running playbooks at scale
  • Partner with applied scientists and detection engineers to analyze logs and translate findings into detection logic
  • Expand, document, and version the technique library while enforcing guardrails

Required Skills & Qualifications

Must Have:

  • Master's Degree in Statistics, Mathematics, Computer Science or related field OR 5+ years experience in software development lifecycle, large-scale computing, modeling, cybersecurity, and/or anomaly detection
  • 3+ years of hands-on red-team, adversary-simulation, or purple-team work across hybrid environments
  • Demonstrated ability to design and codify full attack chains into automation or tooling (Python, PowerShell, Go, etc.)
  • Solid knowledge of Active Directory / Entra ID abuse, cloud-control-plane attacks, and endpoint tradecraft

Nice to Have:

  • Doctorate in Statistics, Mathematics, Computer Science or related field OR 6+ years experience in software development lifecycle, large-scale computing, modeling, cybersecurity, and/or anomaly detection
  • Proven record of shipping open-source security tooling or presenting original research at conferences
  • Experience building or extending graph-based attack-path discovery tools or similar relationship-analysis frameworks
  • Experience applying large-language models or multi-agent frameworks to security automation, adversary simulation, or detection engineering

Benefits & Perks

  • Industry leading healthcare