Join Microsoft's Defender Experts (DEX) Research team, a leader in advanced threat protection. We combine expert hunting with AI analytics to safeguard customers from sophisticated cyberattacks. Our mission is to disrupt threats early by transforming security signals into actionable intelligence.

This role is crucial for advancing managed Sentinel expertise and researching emerging cloud threats that impact Microsoft and third-party products. You'll leverage your deep understanding of multi-cloud environments and security architectures to enhance threat detection and response capabilities within Microsoft Sentinel. Your work will directly contribute to real-time protections for global enterprises, securing diverse technology stacks.

Microsoft empowers every person and organization to achieve more. We foster a growth mindset, encourage innovation, and collaborate to achieve shared goals, building on values of respect, integrity, and accountability to create an inclusive culture.

As a Senior Threat Researcher, you will lead advanced research into emerging cloud-based threats affecting Microsoft and third-party security products across diverse cloud environments. You'll develop and refine detection and response strategies using major SIEM platforms, focusing on Microsoft Sentinel for comprehensive threat coverage.

Collaborate with security teams to design and implement scalable solutions for multi-cloud threat intelligence, detection, mitigation, and response. Translate complex security data into actionable intelligence to improve cloud security operations for global customers.

You will also mentor researchers and detection engineers on best practices for threat hunting and incident response across various SIEM ecosystems. Contribute to industry knowledge and Microsoft's security posture by publishing research, developing threat models, and proactively identifying threats and attack trends.

A minimum of 8 years of experience is required in security research, detection engineering, threat lifecycle management, and cloud security within large-scale, complex cloud environments. Experience with managed services for SIEM platforms is also essential.

You should possess a proven ability to lead and execute advanced research on emerging cloud threats impacting both Microsoft and third-party security products across heterogeneous cloud environments. Demonstrated expertise in developing and refining detection and response strategies using major SIEM and EDR platforms, with a strong emphasis on Microsoft Sentinel and Defender, is critical.

Extensive hands-on experience with cloud platforms, particularly Azure, and a deep understanding of multi-cloud security challenges and solutions are necessary. Strong practical experience in identifying, analyzing, and mitigating real-world cyber threats in complex cloud environments is expected. The ability to work independently, deliver complete solutions, and effectively articulate technical insights to multidisciplinary teams is also required.