Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end to end, simplified solutions. The Microsoft Security organization accelerates Microsofts mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world
Responsibilities
Research and develop detection methods for new and advanced attack techniques -from exploits to implants. Build end-to-end PoCs, from offensive testing to scalable detection, across all our cloud and identity platforms. Stay up to date on the latest attack trends and build strong detections across the kill chaincovering agentic AI & LLM threats, cloud and identity-based attacks. Collaborate with multiple product and engineering teams to design the next iteration of security products, implement detection ideas and validate their effectiveness using a data-driven approach. Collaborate with data science teams to drive ML based protections, understand, and identify detection gaps, capabilities, assumptions, and improvements. Provide cybersecurity expertise as needed during security escalations and incidents to help protect Microsoft and our customers.
Requirements: You have at least 10+ years of experience in the computer security industry, including adversary tradecraft, security operations, incident response, threat hunting, and emerging threats in modern cloud environments
You hare at least 4+ years of experience in researching, prototyping, and defining engineering requirements for threat protection systems
B.Sc. or M.Sc. in Computer Science, Software Engineering, or equivalent practical experience.
Strong problem-solving skills and ability to work in ambiguous situations
Deep knowledge of the security threat landscape, attacker kill chain, and MITRE ATT&CK, especially in cloud, application, identity, and AI-related scenarios
Experience leading projects from concept through design, coding, testing, and maintenance
Preffered Qualifications / Other Requirements:
Proficiency in C#, Python, or Rust
Familiarity with public and hybrid cloud enterprise services
Team player with strong collaboration skills.
.המשרה מיועדת לנשים ולגברים כאחד