Design secure Azure AI and cloud solutions, leading architecture engagements, proofs of concept, pilots, and production adoption for customer applications and agents.
About this role
Microsoft’s Detection and Response Team (DART) handles customer security incidents. The Cybersecurity Threat Hunter leads evidence-driven hunts, setting hypotheses from threat intelligence and customer risk to establish adversary activity, compromise scope and visibility gaps. The work correlates endpoint, cloud, identity, network and third-party telemetry across Windows, Linux, macOS and multi-cloud environments. The hunter writes queries and automation, turns findings into detections, mitigations and threat intelligence, coordinates incident workstreams, documents evidence, supports root-cause analysis, briefs stakeholders and shares research. Required qualification routes are a relevant doctorate; a relevant master’s plus experience in software development, large-scale data analysis or security research; or equivalent practical cybersecurity experience. Candidates also need hands-on experience in threat hunting, Windows forensics, Linux or macOS analysis, or identity-attack investigation, plus experience querying large-scale security telemetry with scripts or automation. Clear assessment and communication of evidence and uncertainty are required, as is meeting applicable Microsoft, customer or government security screening requirements.
This is an AI-generated summary of the employer's original posting — details can be incomplete, out of date or simply wrong. Always confirm everything on the official posting before applying.