{"id":2673403,"url":"https://alion.io/job/microsoft-senior-security-researcher-6","title":"Senior Security Researcher","company":{"id":18,"name":"Microsoft","domain":"microsoft.com","url":"https://alion.io/company/microsoft","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Eightfold","truth_index":{"grade":"B","score":75,"open_postings":157,"ghost_share":0,"stale_share":0.987,"repost_share":0,"time_to_fill_p50_days":28,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sydney, Australia","Melbourne, Australia","Canberra, Australia","New Zealand"],"countries":["AU","NZ"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":89000,"max_usd":204000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2094},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Diamond Model","optional":false},{"name":"SIEM","optional":false},{"name":"SQL","optional":false},{"name":"Azure","optional":true}],"status":"live","first_seen_at":"2026-09-14T22:25:20Z","employer_posted_date":"2026-09-15","last_verified_at":"2026-10-18T11:58:13Z","board_verified":true,"closed_at":null,"days_open":33,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":33},"description":"OverviewThe Cloud & AI organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world. Microsoft is one of the largest enterprise service companies in the world.\nDo you have a passion for helping Microsoft’s clients defend themselves against targeted exploitation? Are you interested in being intimately involved in the latest, cutting-edge developments in the security industry and having a direct impact on the security of all Microsoft customers? Do you want to be on the front lines of helping our customers go toe-to-toe against advanced adversaries? Are you interested in a fast-paced job full of new opportunities? Consider applying for the Senior Security Researcher position within the Applied Intelligence team.\nAs an Applied Intelligence Analyst, you will apply Microsoft Threat Intelligence Center (MSTIC)’s threat intelligence to live investigations across Microsoft's products, services, and customer estates. You sit where intelligence meets incident response: enriching investigations with threat actor context, driving attribution, producing actionable intelligence, discovering and building out emerging clusters of adversary activity, and feeding what you learn back into Microsoft's threat actor tracking mission. In this role, you will collaborate with internal teams (GHOST, DART, etc.) across incident response, threat intelligence, and product groups to protect both Microsoft and Microsoft’s customers. You will strengthen existing partnerships and build new ones with key organizations to deliver benefits to Microsoft and its customers.\nResponsibilities\nInvestigation support. Providing threat intelligence support to proactive security research and reactive incident response engagements across both internal and customer-facing investigations.\nAttribution and actor modeling. Ingesting, modeling, attributing, and documenting intelligence collected during engagements. Owning the attribution lane while investigation partners lead forensics and customer response.\nSupporting Partner Teams: Providing attribution analysis and intelligence support to Microsoft Security partner teams investigating and responding to threats.\nProduct Improvements: Ensuring observations of threat actor exploitation of Microsoft products and services translate into product improvements.\nEmerging threats. Discovering untracked clusters of activity with novel capabilities, developing them into tracked threat groups through in-depth research across the Diamond Model and multiple Microsoft telemetry sources, and helping Microsoft stay on top of the latest and newest threats.\nBriefing and delivery. Delivering threat intelligence briefings to external customers and internal stakeholders. Supporting notifications to customers regarding imminent or ongoing attacker activity.\nFeedback loop. Ensuring intelligence collected during reactive investigations- novel capabilities, infrastructure, targeting, or tradecraft - is promptly collated and surfaced back to Microsoft's actor tracking teams in MSTIC.\nQualifications\nRequired/minimum qualifications\nDoctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR equivalent experience.\nOutstanding technical knowledge of adversary capabilities, infrastructure, and techniques, and the ability to develop new methods to discover and track them.\nExperience tracking advanced financially motivated or state-sponsored adversaries using the Diamond Model; ability to characterize TTPs, infrastructure, and operational campaigns.\nDemonstrated experience producing actionable intelligence that changed the outcome of an investigation or hardened a defended network.\nFamiliarity with host, log, and network forensics, common protocols, and a range of adversary command-and-control methods.\nDemonstrated experience with log analysis and query languages (KQL/Kusto, SQL, or equivalent) across SIEM, identity, endpoint, or cloud telemetry.\nExperience with large-scale cloud, identity, and endpoint telemetry.\nExperience supporting incident response and familiarity with common IR procedures and tooling.\nAbility to communicate findings clearly, with appropriate confidence language, to technical and executive audiences.\nPreferred qualifications\nDoctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 6+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 8+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR equivalent experience.\nBackground in cloud and identity-based intrusions - token theft, OAuth abuse, SaaS-native tradecraft\nDetection engineering or hunting query development at scale\nUse of automation, data science, or AI tooling to accelerate triage, clustering, and analysis\nExperience delivering customer or executive briefings under time pressure during active incidents\nWorking knowledge of malware used in targeted campaigns, including triage of malicious capabilities.\nFamiliarity with Microsoft security data sources - MDC, Defender XDR, Sentinel, Azure Resource Graph.\nThis position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.\nMicrosoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.","description_format":"text","description_chars":7529,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Console Games","Threat Intelligence","Gaming Consoles","Developer Tools"],"lifecycle":[{"event":"open","at":"2026-10-16T04:22:48Z"}],"visa":[],"liveness":{"score":31,"band":"fade","label":"Fading","p_open":1,"p_active":0.573,"p_room":0.55,"age_days":32,"expected_fill_days":28,"reasons":["conf:3","stale_co","wave","velocity","win:tail","comp:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/microsoft-senior-security-researcher-6","json_url":"https://alion.io/job/microsoft-senior-security-researcher-6.json","meta":{"generated_at":"2026-10-18T13:02:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19369,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":18},"rest":"https://alion.io/mcp/rest/get_company?id=18"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmicrosoft-senior-security-researcher-6"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmicrosoft-senior-security-researcher-6"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmicrosoft-senior-security-researcher-6"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/microsoft-senior-security-researcher-6\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmicrosoft-senior-security-researcher-6"}]}