eightfold
Senior Security Researcher
Microsoft
Remote, AUS
Full-time
Senior · 3+ years experience
Remote
Discovered Today
KQLKustoSQLAzure Resource GraphMDCDiamond Model
Free
Job Fit Check
Base Career helps you apply smarter for this job.
?%
Ready to ScanKey skills for this role
KQLKustoSQL
Key Skills for This Role
KQLKustoSQLAzure Resource GraphMDCDiamond Model
Full Job Posting
Required/minimum qualifications
- Outstanding technical knowledge of adversary capabilities, infrastructure, and techniques, and the ability to develop new methods to discover and track them.
- Experience tracking advanced financially motivated or state-sponsored adversaries using the Diamond Model; ability to characterize TTPs, infrastructure, and operational campaigns.
- Demonstrated experience producing actionable intelligence that changed the outcome of an investigation or hardened a defended network.
- Familiarity with host, log, and network forensics, common protocols, and a range of adversary command-and-control methods.
- Demonstrated experience with log analysis and query languages (KQL/Kusto, SQL, or equivalent) across SIEM, identity, endpoint, or cloud telemetry.
- Experience with large-scale cloud, identity, and endpoint telemetry.
- Experience supporting incident response and familiarity with common IR procedures and tooling.
- Ability to communicate findings clearly, with appropriate confidence language, to technical and executive audiences.
Preferred qualifications
- Background in cloud and identity-based intrusions — token theft, OAuth abuse, SaaS-native tradecraft
- Detection engineering or hunting query development at scale
- Use of automation, data science, or AI tooling to accelerate triage, clustering, and analysis
- Experience delivering customer or executive briefings under time pressure during active incidents
- Working knowledge of malware used in targeted campaigns, including triage of malicious capabilities.
- Familiarity with Microsoft security data sources - MDC, Defender XDR, Sentinel, Azure Resource Graph.
- This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
- Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Microsoft
Customer Success Acct Manager
Doha, QAT
EntryFull-time
Microsoft is seeking an early-career Customer Success Account Manager to help customers adopt cloud, AI, and digital transformation solutions. The role supports customer success plans, solution health monitoring, stakeho
Discovered TodayView →
Customer Success Acct Manager
Doha, QAT
Discovered TodayFull-time
Senior Forward Deployed Engineer - Data Scientist
Sydney, AUS
Discovered TodayFull-time
Senior Software Engineer - Data
Redmond, USA
Discovered TodayFull-time
Software Engineer II - CTJ - Poly
, USA
Discovered TodayFull-time
Software Engineer II - Windows 365 (200055635)
, USA
Discovered TodayFull-time
Senior Software Engineer - Data (200055649)
, USA
Discovered TodayFull-time
Senior Software Engineer (200055550)
, USA
Discovered TodayFull-time
Software Engineer II (200055544)
, USA
Discovered TodayFull-time