About the Role
The Microsoft Threat Protection Research (MTP-R) Purple Team is seeking a senior-level red team security researcher experienced in adversary emulation, offensive tooling, and malware development. This role will design and execute realistic attack simulations using AI-first approaches, agentic systems, and LLM-driven workflows to scale attack development and emulation fidelity against modern adversaries.
Responsibilities
- Design and execute adversary simulations emulating real-world threat actors across endpoint, identity, cloud, and SaaS environments.
- Develop and modify offensive tooling, including custom payloads, loaders, and command-and-control (C2) frameworks.
- Conduct malware development and tradecraft research to replicate modern attacker techniques such as evasion, persistence, and lateral movement.
- Leverage threat intelligence to inform adversary emulation scenarios, including campaign design, TTP selection, and operational sequencing.
- Apply threat modeling frameworks such as MITRE ATT&CK to emulate realistic attack paths and identify defensive gaps.
- Utilize AI-enabled and agentic systems to generate attack variations, automate tradecraft execution, and scale simulation coverage.
- Partner with blue team and detection engineering teams to validate detections and improve defensive capabilities.
- Analyze telemetry generated from simulations to assess detection coverage and identify opportunities for improvement.
- Contribute to simulation reports, technical documentation, and internal knowledge sharing.
- Collaborate across teams to improve offensive tooling, methodologies, and research practices.
Requirements
- Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field.
- Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
- Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
- Equivalent experience.
- Ability to meet Microsoft, customer and/or government security screening requirements.
- Must pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.
- Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
- Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 6+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
- Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 8+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
- Equivalent experience.
- 3+ years of experience with coding.
- 2+ years of experience in red team operations, adversary emulation, or offensive security research.
- 1+ years of experience with large language models or machine learning.
- Experience in classical and deep learning machine learning methods.
- 1+ years of experience performing threat intelligence research.
- Security related certifications such as OSCP, OSWE, GPEN, GREM, GCPN.
Skills
- Adversary emulation
- Offensive tooling
- Malware development
- AI-first
- Agentic systems
- LLM-driven workflows
- Coding
- Large language models
- Machine learning
- Classical machine learning methods
- Deep learning machine learning methods
- Threat intelligence research
Experience Level
- Senior-level
- 3+ years experience
- 4+ years experience
- 6+ years experience
- 8+ years experience
- 2+ years of experience
- 1+ years of experience
Education Level
- Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field
- Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field
- Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field
Salary/Compensations
- USD $119,800.00 - $234,700.00 per year (U.S. typical base pay range)
- USD $160,200.00 - $261,000.00 per year (San Francisco Bay area and New York City metropolitan area)
Benefits
- Certain roles may be eligible for benefits and other compensation.
About the Company
- Security is one of the most critical priorities for our customers in a world of growing digital threats, regulatory scrutiny, and estate complexity.
- Microsoft Security aspires to make the world safer by empowering every user, customer, and developer with a security cloud that delivers end-to-end, simplified protection.
- The Microsoft Security organization advances this mission by helping secure digital technology platforms, devices, and clouds across customers’ heterogeneous environments, while also protecting Microsoft’s internal estate.
- Our culture is grounded in a growth mindset, inspiring excellence, and enabling teams and leaders to bring their full potential each day.
Equal Opportunity
- Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances.
- If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.
