{"id":2545644,"url":"https://alion.io/job/microsoft-senior-threat-intelligence-analyst","title":"Senior Threat Intelligence Analyst","company":{"id":18,"name":"Microsoft","domain":"microsoft.com","url":"https://alion.io/company/microsoft","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Eightfold","truth_index":{"grade":"B","score":75,"open_postings":116,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom","Cheltenham, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":74700,"max":122600,"currency":"GBP","period":"year","gross":null,"usd_annual":161205},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Kibana","optional":true},{"name":"SIEM","optional":true},{"name":"Splunk","optional":true},{"name":"SQL","optional":true}],"status":"live","first_seen_at":"2026-10-07T06:46:59Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-15T21:22:09Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"OverviewThe Cloud & AI organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their full potential each day. In doing so, we create life-changing innovations that impact billions of lives around the world. Microsoft is one of the largest enterprise service companies in the world.\nIf you have a deep background in analysis and want to be at the forefront of threat tracking and technique discovery, the Microsoft Threat Intelligence Center (MSTIC) wants to hear from you. As a Principal Threat Intelligence Analyst on our team, you will obtain real-time visibility into hundreds of simultaneous intrusions and convert this into finished intelligence, prioritized judgments, and protection at scale. The successful candidate is a critical thinker and problem solver, skilled at discovering novel intrusions and adversary tradecraft through analysis, and curious enough to pursue impact through product hardening and disruptions where there is no precedent.\nMicrosoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.\nResponsibilities\nDiscovering and analyzing attacker activity across on-premises and cloud environments.\nIdentifying potential threats, allowing for proactive defense and customer notification before an actual incident.\nProviding recommendations to improve customers’ cybersecurity posture going forward and performing threat intelligence knowledge transfer to prepare customers to defend against today’s threat landscape.\nBuilding proof-of-concept and prototype threat hunting tools, automations, and new capabilities.\nDriving product and tooling improvements by conveying learnings from threat intelligence and intrusion analysis at scale to engineering partner teams.\nUsing large-scale query workflows to distill adversary signal within an unparalleled volume of potentially malicious activity to pivot, validate, and scope what matters.\nQualifications\nRequired/minimum qualifications\nDoctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field\nOR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND proven experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection\nOR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND substantial experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR equivalent experience.\nAdditional or preferred qualifications\nProven knowledge of security fundamentals across Microsoft platforms (Client, Server, Cloud), especially identity, cloud control planes, and enterprise attack paths.\nUnderstanding of malware, tooling, and related activity well enough to extract indicators and develop detections for attacker methods. Reverse engineering or detection engineering depth is a plus, not a requirement. Curiosity and ingenuity matter as much as years of technical experience.\nExperience producing strategic, operational, and tactical threat intelligence, including actor tracking, campaign clustering, and analytic writing for technical and executive audiences.\nFamiliarity and understanding of SQL or Kusto Query Language (KQL) queries (or experience with large database/SIEM query languages such as Splunk/Humio/Kibana, etc.)\nDeep knowledge of endpoint, email, and cloud forensic log artifacts - or similar experience in analysis of SIEM logs, web server logs, AV logs, and security logs.\nExperience building and reviewing threat hunting automations using scripting languages.\nExperience developing collection requirements, judging source reliability, and turning raw telemetry and partner reporting into actionable assessments.\nDemonstrated advanced problem solving, troubleshooting, and analysis skills.\nSecurity Research IC4 - The typical base pay range for this role across United Kingdom is £ 74,700.00 - £ 122,600.00 per year. Certain roles may be eligible for benefits and other compensation.\nFind additional benefits and pay information here:\nhttps://careers.microsoft.com/v2/global/en/corporate-pay/united-kingdom-corporate-pay.html\nSecurity Research IC4 - The typical base pay range for this role across United Kingdom is £ 74,700.00 - £ 122,600.00 per year. Certain roles may be eligible for benefits and other compensation. \nFind additional benefits and pay information here:\nhttps://careers.microsoft.com/v2/global/en/corporate-pay/united-kingdom-corporate-pay.html\nThis position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.\nMicrosoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.","description_format":"text","description_chars":6130,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","Console Games","Gaming Consoles"],"lifecycle":[{"event":"open","at":"2026-10-14T16:35:27Z"}],"visa":[],"liveness":{"score":56,"band":"ok","label":"Likely open","p_open":1,"p_active":0.619,"p_room":0.9,"age_days":7,"expected_fill_days":22,"reasons":["conf:2","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-15T05:46:00Z"},"pay":{"stated_usd_annual":161205,"is_top_pay":false},"html_url":"https://alion.io/job/microsoft-senior-threat-intelligence-analyst","json_url":"https://alion.io/job/microsoft-senior-threat-intelligence-analyst.json","meta":{"generated_at":"2026-10-15T21:45:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32998,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":18},"rest":"https://alion.io/mcp/rest/get_company?id=18"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmicrosoft-senior-threat-intelligence-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmicrosoft-senior-threat-intelligence-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmicrosoft-senior-threat-intelligence-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/microsoft-senior-threat-intelligence-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmicrosoft-senior-threat-intelligence-analyst"}]}