Principal Security Research - Microsoft Security
Core
Define technical direction and strategy for identity protection research, leading investigations into novel threats and designing robust detection logics across the attacker kill-chain.
Role type
Principal Security Researcher (Identity Protection)
Builds
Shipped detection capabilities and measurable customer protection impact for identity systems.
Domain
Cybersecurity, Identity Protection, Threat Intelligence
Required skills
Windows internals, identity protocols (Kerberos, NTLM, LDAP, OAuth 2.0, SAML), Generative AI tool fluency, threat hunting, detection engineering, cross-group leadership
Preferred skills
C#, Python, C++, KQL, SQL, Cypher, Windows/Cloud forensics, external thought leadership (papers, talks, CVEs)
Technologies
GitHub Copilot, Security Copilot, ChatGPT, Claude, KQL, SQL, Cypher
Responsibilities
Set multi-quarter strategy from threat landscape framing to shipped detection, lead deep investigation of data to surface novel threats, design robust detection logics across the kill-chain, mentor and grow other researchers, shape team leverage of Generative AI
Seniority
Principal, strategy & mentorship