Security Researcher

Overview

Microsoft Defender for Endpoint (MDE) is a product for preventative protection, post-breach detection, automated investigation, and response. Our team, the core machine learning and data science team, is a cross-discipline team responsible for building ML, LLM, and automation solutions that defend over a billion end users and enterprises from cybersecurity attacks through Microsoft Defender AntiVirus, Microsoft Defender Endpoint Detection and Response, and Network Protection products. We are a mix of machine learning engineers, data scientists, data engineers, and security researchers who develop big data pipelines, run experiments, and deploy our protection to production to protect customers at scale.

We are looking to hire an Early in Career Security Researcher who has a passion for a role focusing on investigating attacks, working with big data and LLMs, and engineering defensive solutions to the latest attacks.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.

Responsibilities

• Investigate attacks through threat hunting on top of product telemetry - identifying protection gaps and opportunities for systems to better protect our customers.
• Experiment with and apply large language models and agentic systems to protect our customers and improve our internal systems.
• Propose, design, experiment, and implement machine learning and automation designs to protect our customers.
• Collaborate closely with engineering and product teams to design security sensors, validate protection concepts, and measure effectiveness using data-driven methodologies.
• Own end-to-end lifecycle from hypothesis to productionization.

Qualifications

Required qualifications:

• Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field OR equivalent experience.

Preferred Qualifications

• 1+ years of experience in software development.
• 1+ years of experience with large-scale data, utilizing either distributed data processing frameworks (e.g., Apache Spark, Hadoop), real-time data streaming platforms (e.g., Kafka), or query languages like SQL and KQL.
• 1+ years of experience with Large Language Models and/or agentic systems.

Key skills/competency

• Cybersecurity
• Machine Learning
• Large Language Models (LLM)
• Threat Hunting
• Data Science
• Endpoint Security
• Automation
• Big Data
• Apache Spark
• SQL/KQL