Senior Research and Intelligence Officer in London

Full-TimeWork site: 0 days / week in-office – remoteRole type: Individual ContributorTravel: Less than 25%Profession: Security EngineeringDiscipline: Security ResearchCompany: MicrosoftOverviewThe Cloud & AI organization accelerates Microsoft's mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers' heterogeneous environments, as well as ensuring the security of our own internal estate. In doing so, we create life-changing innovations that impact billions of lives around the world. Microsoft is one of the largest enterprise service companies in the world. If you have a deep background in analysis and want to be at the forefront of threat tracking and technique discovery, the Microsoft Threat Intelligence Center (MSTIC) wants to hear from you. As a Principal Threat Intelligence Analyst on our team, you will obtain real-time visibility into hundreds of simultaneous intrusions and convert this into finished intelligence, prioritized judgments, and protection at scale. The successful candidate is a critical thinker and problem solver, skilled at discovering novel intrusions and adversary tradecraft through analysis, and curious enough to pursue impact through product hardening and disruptions where there is no precedent. Microsoft's mission is to empower every person and every organization on the planet to achieve more. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. Providing recommendations to improve customers' cybersecurity posture going forward and performing threat intelligence knowledge transfer to prepare customers to defend against today's threat landscape. Building proof-of-concept and prototype threat hunting tools, automations, and new capabilities. Driving product and tooling improvements by conveying learnings from threat intelligence and intrusion analysis at scale to engineering partner teams. QualificationsRequired/minimum qualificationsDoctorate in Statistics, Mathematics, Computer Science, Computer Security, or related fieldOR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND proven experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detectionOR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND substantial experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR equivalent experience. Additional or preferred qualificationsProven knowledge of security fundamentals across Microsoft platforms (Client, Server, Cloud), especially identity, cloud control planes, and enterprise attack paths. Experience producing strategic, operational, and tactical threat intelligence, including actor tracking, campaign clustering, and analytic writing for technical and executive audiences. Familiarity and understanding of SQL or Kusto Query Language (KQL) queries (or experience with large database/SIEM query languages such as Splunk/Humio/Kibana, etc.)Deep knowledge of endpoint, email, and cloud forensic log artifacts - or similar experience in analysis of SIEM logs, web server logs, AV logs, and security logs. Experience building and reviewing threat hunting automations using scripting languages. Experience developing collection requirements, judging source reliability, and turning raw telemetry and partner reporting into actionable assessments. Demonstrated advanced problem solving, troubleshooting, and analysis skills. Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.