New 
Senior Security Researcher
 Microsoft | |
 United States, Washington, Redmond | |
 Jan 22, 2025 | |
|
OverviewSecurity represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end to end, simplified solutions. The Microsoft Security organization accelerates Microsoft's mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers' heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world. The Microsoft Security AI Research team is responsible for defending Microsoft and our customers through applied AI innovation. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world. Defending Microsoft's complex environment provides a unique opportunity to build and evaluate autonomous defense and offense through emerging generative AI capabilities. Microsoft understands and learns from its own defensive and offensive expertise, including via teams like Microsoft's Threat Intelligence Center and Microsoft's Red Team, and has the opportunity to build a unique knowledge graph describing the relationship between risk, investigation, and response. This data, built over Microsoft's complex digital estate, along with Microsoft AI forms the foundation for innovative solutions to defend Microsoft. We are looking for a Senior Security Researcher to join our applied science team to reshape how we defend Microsoft. You will leverage LLMs and agentic systems to uncover and operationalize new adversarial techniques while addressing gaps in red team capabilities and supporting autonomous red team campaigns. You will use various approaches, including the analysis of structured and unstructured data such as code repositories and operational data, to identify new capabilities, assess design flaws and vulnerabilities, and expand our TTP catalog. You will also prototype and validate exploitation methods while helping design LLM-based workflows for TTP discovery and operationalization, advancing offensive data analysis and strengthening red team strategies. For those passionate about making a meaningful impact in the security industry, don't miss this opportunity to join the team working on the latest AI technology and applicability. Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
ResponsibilitiesAnalyzes complex issues using multiple data sources to develop insights and identify security problems and threats. Creates new solutions to mitigate security issues. Makes tradeoffs to balance security and operational needs. Identifies and recommends process improvements and adopts best practices. Leverages the work of others to improve existing processes. Helps to drive resolution to systemic security issues through cross-team collaboration. Anticipates previously unknown potential artifacts that could be present in data as indicators of attacker activity. Collaborate with the MS Red Team and Applied Research Scientists to leverage AI-driven techniques, including LLMs and agentic systems, to identify and operationalize new adversarial techniques, address capability gaps in red team engagements, expand the internal TTP catalog, and support autonomous red team campaigns.Prototype, validate, and refine exploitation methods, using LLMs and agentic systems to discover vulnerabilities, develop exploits, and enhance workflows that automate and strengthen red team operations.Design and execute realistic attack simulations to test and improve methodologies, advancing offensive data analysis and supporting autonomous red team strategies.Champion innovative principles and forward-looking concepts guided by research trends in academia, OSS and industry.Cultivate global collaborations with security researchers to exchange knowledge, stay updated on emerging threats, and build partnerships with offensive security researchers to advance and integrate cutting-edge offensive security research shared within the community.Share knowledge with the community through presentations, publications, and active participation in social media, contributing to the broader information security ecosystem.OtherEmbody our Culture and Values | |