This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Microsoft’s Digital Crimes Unit (DCU) is hiring a Cybercrime Investigator to lead global investigations and disruption operations against sophisticated cybercriminal networks and online threat groups. This role conducts proactive technical investigations into cyberattacks, fraud, scams, and other threats targeting Microsoft customers and democratic institutions—or abusing Microsoft products and services, including the malicious use of AI.
Job Responsibility
Identify and analyze data sources to uncover cybercrime patterns and trends targeting our services and customers
Building proof-of-concept and prototype threat hunting tools, automations, and new capabilities
Collaborate with security engineers and cross-company stakeholders to implement comprehensive investigative and enforcement strategies
Lead and support complex fraud investigations involving cyber‑enabled financial crime, including online scams, business email compromise (BEC), payment fraud, account abuse, and related large‑scale fraud activity
Conduct analysis on large, complex data sets to detect and investigate anomalies, develop actionable insights and strategies
Identify and map malicious technical infrastructure used to facilitate cybercrime
Work independently to detect, investigate, and understand new and emerging cybercrime attack vectors
Partner with DCU attorneys to develop legal strategies to disrupt and impact online criminal networks
Drafting criminal referrals for law enforcement
Provide expert witness testimony in court filings and proceedings
Embody our culture and values
Requirements
4+ years experience in compliance, finance, data-analytics, investigations, or related field OR equivalent experience
Citizenship & Citizenship Verification: This position requires verification of US citizenship due to citizenship-based legal restrictions
Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter
Bachelor's Degree in Business, Accounting, Criminal Justice, Law, International Relations or related field AND 8+ years experience in compliance, cyber, finance, data-analytics, investigations, or related field OR equivalent experience
4+ years experience with the following skills and knowledge: Analytical tools such as: Microsoft SQL Server, I2 Analyst Notebook, Paterva Maltego, Kusto (Azure Data Explorer), Python, and other scripting languages
Certifications related to security and/or investigations in incident response and computer forensics
Malware analysis, malware reverse engineering, and behavioral malware analysis
Threat actor evidence, including familiarity with common Indicators of Compromise (IOCs), Indicators of Activity (IOAs), and Tools, Techniques, and Procedures (TTPs)
Supporting complex fraud investigations, including large scale online fraud, scams, business email compromise (BEC), payment fraud, account abuse, or related cyber-enabled financial crime
Authoring clear, accurate, highly technical investigative reports involving complex technical findings, with actionable insights for non-technical audiences
Cryptocurrency and blockchain investigation tools
Network protocols, DNS sink holing, intelligence analysis, reporting using standard tools and techniques
and analyzing large datasets and developing effective investigative action plans