Principal Security Researcher

Microsoft; Deutschland; Vor Ort; EUR 80.000 - 120.000; Vollzeit

Zusammenfassung

A leading technology company is seeking a Principal Security Researcher to bolster cybersecurity efforts. The role involves analyzing attacker activity, identifying threats, and developing intelligence. Ideal candidates will have expertise in cybersecurity, software development, and a strong analytical background. This position fosters a growth mindset and encourages innovation to protect customers worldwide.

Leistungen

Healthcare

Educational resources

Generous time off

Parental leave

Qualifikationen

• Experience in software development lifecycle, large-scale computing, cybersecurity, threat hunting, or anomaly detection.
• Strong analytical background.
• Ability to obtain and maintain a Security Clearance.

Aufgaben

• Deep analysis of attacker activity in on-premises and cloud environments.
• Identifying potential threats for proactive defense.
• Providing cybersecurity improvement recommendations.

Kenntnisse

Software development lifecycle

Cybersecurity

Threat hunting

Anomaly detection

Large-scale computing

SQL

Kusto Query Language (KQL)

Active Directory expertise

Forensic tools usage

Linux/macOS forensic analysis

Ausbildung

Master’s Degree in Statistics, Mathematics, Computer Science, or related field

Tools

Jupyter Notebooks

Splunk

Kibana

Jobbeschreibung

Social network you want to login/join with:

Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end-to-end, simplified solutions. The Microsoft Security organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry are securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world.

Do you have a passion for helping Microsoft’s clients defend themselves against targeted exploitation?

Are you interested in being involved in the latest developments in the security industry and having a direct impact on the security of all Microsoft customers?

Do you want to be on the front lines of helping our customers face advanced adversaries?

If so, you may be a fit for a Principal Security Researcher role for the GHOST team!

We seek an experienced Principal Security Researcher with a strong analytical background to perform threat hunts, assist with investigations, develop threat intelligence, and cultivate investigation best practices into Microsoft tooling and products. Researchers will support a global team to identify and catalog new attacker TTPs, victims, and deliver customer notifications to protect enterprise customers worldwide and empower customers to defend themselves via Microsoft products.

Microsoft’s mission is to empower every person and organization to achieve more. We foster a growth mindset, innovate to empower others, and collaborate to achieve shared goals. We value respect, integrity, and accountability, creating an inclusive culture where everyone can thrive.

In line with our values, we are committed to cultivating an inclusive work environment that positively impacts our culture daily.

Qualifications

Required/Minimum Qualifications:

Experience in software development lifecycle, large-scale computing, modeling, cybersecurity, threat hunting, and/or anomaly detection.

OR a Master’s Degree in Statistics, Mathematics, Computer Science, or a related field.

Microsoft Cloud Background Check: This position requires passing the Microsoft Cloud background check upon hire/transfer and every two years.

Preferred Qualifications:

• Proficiency in software development lifecycle, large-scale computing, modeling, cybersecurity, threat hunting, and/or anomaly detection.
• OR Doctorate in Statistics, Mathematics, Computer Science, or related field.
• Knowledge of security fundamentals across Microsoft platforms (Client, Server, Cloud).
• Strong understanding of malware and the modern threat landscape, especially identity-based attacks.
• Familiarity with SQL or Kusto Query Language (KQL), or large database/SIEM query languages like Splunk, Humio, Kibana.
• Experience with Jupyter Notebooks or automations with scripting languages.
• Consulting background.
• Active Directory expertise.
• Experience with threat actor evidence, IOC, IOA, TTPs.
• Use of forensic tools such as X-Ways, Encase, FTK, etc.
• Knowledge of Microsoft Azure and Office365 platforms.
• Experience with forensic logs in SIEM, web logs, AV logs, protection logs.
• Familiarity with Microsoft Defender 365 security stack, especially Advanced Hunting queries.
• Understanding of Windows internals and trace evidence locations.
• Knowledge of third-party cybersecurity solutions, especially EDR and SIEM.
• Linux/macOS forensic analysis skills.
• Relevant technical and project management certifications.
• Ability to obtain and maintain a Security Clearance.

Responsibilities

This role involves:

• Deep analysis of attacker activity in on-premises and cloud environments.
• Identifying potential threats for proactive defense.
• Customer notifications regarding attacker activity.
• Providing cybersecurity improvement recommendations and threat intelligence transfer.
• Building threat hunting tools, automations, and capabilities.
• Driving product and tooling improvements based on research findings.
• Prioritizing and addressing complex security issues affecting customers.
• Synthesizing research into mitigation recommendations and sharing across teams.

Benefits and perks vary by employment nature and location, including healthcare, educational resources, discounts, savings, parental leave, generous time off, giving programs, and networking opportunities.