Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Principal Security Researcher role.
Rezi rewrites your resume against Microsoft's job description. Free.
Tailor your resume to this Principal Security Researcher role.
Rezi rewrites your resume against Microsoft's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Principal Security Researcher posting at Microsoft — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Principal Security Researcher posting at Microsoft — free, in seconds.
About the Role
Join the Global Hunting, Oversight, and Strategic Triage (GHOST) team as a Principal Security Researcher with a Digital Forensics and Incident Response background. Perform threat hunts, assist with investigations, develop threat intelligence, and cultivate effective investigation practices within Microsoft tooling and products. Support a global team in identifying and cataloging new attacker tactics, techniques, and procedures (TTPs) and victims, delivering customer notifications, and empowering customers to protect themselves through improving Microsoft products.
Responsibilities
- Lead technical workstreams during investigations and guide others in conducting deep analyses of attacker activity across on-premises and cloud environments.
- Identify potential threats, enabling proactive defense before an incident occurs.
- Present technical findings and recommendations to improve customers’ cybersecurity posture and transfer threat intelligence knowledge.
- Define requirements for and assist in the development of production threat-hunting tools, automations, and new capabilities.
- Drive investigation strategies, develop new hunting methodologies, and influence security products and practices across multiple teams.
- Mentor others and help the team strengthen both technical and interpersonal skills.
Requirements
- Extensive and demonstrated professional experience in Threat Hunting, Incident Response (DFIR), Threat Intelligence, or Security Research.
- Experience investigating sophisticated cyber threats, including APT or nation-state activity.
- Extensive experience working with forensically collected data and associated tooling, security telemetry, logs, and SIEM platforms.
- Expertise in KQL or equivalent query languages (Splunk, Humio, Kibana, etc.).
- Experience with EDR and security monitoring technologies such as Microsoft Defender, Microsoft Sentinel, CrowdStrike, or similar platforms.
- Experience managing or conducting security reviews of Microsoft Azure tenants, Microsoft 365, and Entra ID.
- Proven ability to analyze security data to investigate attacker activity and identify indicators of compromise (IOCs), indicators of activity (IOAs), and tactics, techniques, and procedures (TTPs).
- Experience and familiarity with the collection of digital forensic data, as well as case management and forensic analysis tools such as X-Ways Forensics.
- Solid written and verbal communication skills in English and the ability to work in a global team environment.
- Ability to obtain and maintain UK security clearance.
Skills
- Threat Hunting
- Incident Response (DFIR)
- Threat Intelligence
- Security Research
- KQL
- Splunk
- Humio
- Kibana
- Microsoft Defender
- Microsoft Sentinel
- CrowdStrike
- Microsoft Azure
- Microsoft 365
- Entra ID
- X-Ways Forensics
Location
- United Kingdom
Work Type
- Full-time
Experience Level
- Principal
Education Level
- Industry certifications in cybersecurity, DFIR, incident response, or threat hunting (e.g., CISSP, GIAC) are preferred.
Salary/Compensations
- £ 93,500.00 - £ 161,800.00 per year
Benefits
- Certain roles may be eligible for benefits and other compensation.
About the Company
- The Cloud & AI organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry are securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate.
- Our culture is centered on embracing a growth mindset, inspiring excellence, and encouraging teams and leaders to reach their full potential each day.
- In doing so, we create life-changing innovations that impact billions of lives around the world.
- Microsoft is one of the largest enterprise services companies in the world.
- Microsoft’s mission is to empower every person and every organization on the planet to achieve more.
- As employees, we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals.
- Each day, we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
- In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.
Equal Opportunity
- Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances.
- If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.