The job includes performing both low level and high-level research of attackers’ techniques, security mechanism and controls, and data analysis over various types of telemetries.
Responsibilities include:
- Analyze and research security controls, attackers’ techniques and anomalous patterns.
- Explore massive amounts of data to come up with new security posture insights, which can then be translated into security recommendations for our customers.
- Work together with the different engineering teams to develop the code to support the research findings.
- Collaborate with multiple product teams to design sensors, implement discovery & detection logics and validate their effectiveness using a data-driven approach.
- Collaborate with data science teams to understand and identify detection gaps, capabilities, assumptions and improvements.
- Collaborate with other teams across Microsoft and come up with innovative ideas which should be part of future versions of the product.