דרושים MICROSOFT ISRAEL

Cloud Apps and Identity Research team (CAIR) is looking for a Security Researcher with expertise about Identity based attacks and threats. The ideal candidate can demonstrate strong knowledge of common authentication protocols and technologies both on-prem and on cloud (e.g. Kerberos, SAML, Oauth, LDAP) and is familiar with Identity Providers' logs and internals (e.g. Entra ID, Okta). The job includes performing technical research to dissect identity attacks as observed from security research, incidents, threat landscape, customers reports and guide product and engineering teams to deliver optics, high-confidence detections and durable protection for customers.
Responsibilities
Analyze and understand the internals of authentication/network protocols and be able to independently reproduce identity-based attacks for investigation, study and research purposes.
Become a subject matter expert of investigation, collection, analysis and forensic of identity logs, including deep understanding of current trends and landscape of identity-based attacks and exploits
Collaborate with multiple product and engineering teams to design the next iteration of sensors, implement detection ideas and validate their effectiveness using a data-driven approach.
Work together with the different engineering teams to deliver the prototype and code to support the research findings.
Provide cybersecurity expertise as needed during security escalations and incidents to help protect Microsoft and our customers.

Come and be part of a dynamic team focused on securing cutting-edge AI and cloud technologies in a rapidly evolving threat landscape. We are leading new initiatives and research projects across AI Security, Identity Protection, and SaaS Defense, and this role offers a unique opportunity to help define the rules of the game. AI is transforming the way we interact with computers and machines and defining new cybersecurity problems and opportunities - we are looking for a Principal Researcher who can help us stay ahead of the curve. In this role, youll research and build defenses across AI systems, agentic protocols, Identity platforms, and SaaS applications. One day you might analyze a new class of AI prompt injection attacks or Agents abuse, the next youll be hunting through data or creating novel protection mechanisms for them. Youll work closely with product teams to turn research prototypes into real security features. Join our threat protection research team and be part of a team who contributes to Microsofts most advanced and innovative security solutions. Our mission is to help everyone to counter cyber threats by strengthening their security capabilities across their entire environment, including Identities, Agentic AI systems, Cloud and Applications. Microsofts mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond
Responsibilities
Research and develop detection methods for new and advanced attack techniques -from exploits to implants. Build end-to-end PoCs, from offensive testing to scalable detection, across all our cloud and identity platforms. Stay up to date on the latest attack trends and build strong detections across the kill chaincovering agentic AI & LLM threats, cloud and identity-based attacks. Collaborate with multiple product and engineering teams to design the next iteration of security products, implement detection ideas and validate their effectiveness using a data-driven approach. Collaborate with data science teams to drive ML based protections, understand, and identify detection gaps, capabilities, assumptions, and improvements. Provide cybersecurity expertise as needed during security escalations and incidents to help protect Microsoft and our customers.

We are looking for a talented Senior Security Software Engineer with a solid background in the security domain to lead the development of innovative security solutions for the next generation portfolio products. In this role, you will lead products core features, from understanding the system requirements and defining the features behavior, through designing the software architecture to implementing and releasing high quality code. You will work closely with hardware and software engineers, system engineers and security experts to characterize the solutions and determine the development strategy.

Join us in pushing the boundaries of security engineering and making an impact on a global scale. Your expertise will play a vital role in ensuring the security and integrity of Microsoft's future devices. If you're ready to take your career to the next level and be part of something remarkable, apply now! Together, we will achieve more.

Microsofts mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
Responsibilities
Working together with the product and system engineering team and security experts characterize innovative security solutions.
Leading core features design and implementation according to system architecture specifications and engineering requirements in collaboration with other groups in Microsoft.

Assessing security threats and develop design and mitigation strategies ensure the SW is highly secured.

Mentoring and coaching other team members on security best practices and SW development techniques.

Staying up to date with the latest security trends, methodologies and technologies.