Senior Security Researcher
Microsoft
Senior Security Researcher
Multiple Locations, Israel
Save
Overview
Come and be part of the team building one of Microsoft’s most exciting security products, Microsoft Defender for Endpoint. As cyber-attacks have become more sophisticated, MDE helps enterprises detect, investigate, and automatically disrupt advanced attacks and data breaches on their networks. From detecting nation state actors to advanced ransomware actors in action, our research team brings deep knowledge of the attacker landscape and tradecraft to create the innovations necessary to uncover and protect against even the most well-funded adversaries.
We are seeking an experienced security researcher who is excited by uncovering unknown attacks to join our Israeli research team and focus on detecting and disrupting sophisticated enterprise attacks. The job includes researching novel attack techniques, hunting through our rich sensor data, identifying necessary optics for detecting malicious behaviour and crafting detection and protection logic to ensure compromise does not go undetected.
Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
Qualifications
- BS+ in Computer Science\Computer Engineering or equivalent engineering degrees
- You have 6+ years of software development/research experience
- You have In-depth knowledge and experience with the security threat landscape
- You have extensive, practical OS internals knowledge of Windows
- You have reverse Engineering skills: familiar with debuggers, disassemblers, protocols, file formats
- Excellent cross-group and interpersonal skills
- Code fluency in either C#, C, Python or Rust
Preferred qualifications:
- Offensive security research experience
- Digital forensics, Incident response and threat hunting skills
- Industry recognized author of security research papers, blogs, or books
- Low-level/security knowledge of other operating systems
- Familiarity with cloud environments, and hybrid cloud enterprise services
Other Requirements:
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check:
- This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: - This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter. - Experience in authoring of security research papers, blogs, or books. - Experience with Windows forensics and an understanding of key forensic artifacts, especially around lateral movement scenarios. - Experience with Cloud forensics, including identity attack artifacts and lateral movement techniques.
#MSFTSecurity #MSFTSecurity #MSFTSecurity #MDEIL
#researchMailerFeb
Responsibilities
- Investigate, analyse, and expand MDE security, by exploring real incidents, developing durable protection strategies, and circumventing threats across the entire kill-chain
- You will collaborate with multiple product teams to design sensors, implement protection ideas, and validate their effectiveness using a data-driven approach
- You will collaborate with data science teams to drive ML based protections, understand, and identify detection gaps, capabilities, assumptions, and improvements
- Be involved in customer conversations to identify opportunities, gaps, and concerns to improve product protection value