This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Microsoft Security Incident Response (DART Team) is looking for a Security Researcher to help shape the future of our proactive cyber resilience portfolio. These deliverables will help ensure our customers stay ahead of critical cyber threats by proactively planning for responses.
Job Responsibility:
Develop proactive cyber‑resilience capabilities by building and enhancing a portfolio of incident response offerings, including cyber ranges, threat assessments, and compromise assessments
Drive Red Team and OT/ICS-aligned research initiatives, developing methodology and novel approaches that strengthen detection, response, and adversary‑simulation effectiveness
Create customer‑ and field‑ready technical content that articulates the value, methodologies, and expected outcomes of proactive incident response services to support sales, marketing, and field readiness
Collaborate across MCAPS field, Marketing, and Security organizations to align messaging, improve delivery quality, and land proactive incident‑response services at scale
Establish and maintain strategic partnerships with leading OT/ICS security firms to expand DART’s operational capabilities
Build and manage relationships with Red Team partners to augment offensive security capacity, methodologies, and specialized delivery scenarios
Embody our culture and values
Requirements:
Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field
Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
equivalent experience
5+ years in cyber security incident response working directly with customers on cyber incident remediation including investigation, remediation, eviction, and improvement
5+ years in IP dev around cyber security deliveries focused on proactive resilience improvement
5+ years in customer and enterprise cyber security GTM and field training and readiness