Principal Security Research - Microsoft Security
Core
Define technical direction and strategy for identity protection research, leading investigations into novel threats and designing robust detection logics across the attacker kill-chain.
Role type
Principal Security Researcher (Identity Protection)
Builds
Shipped detection capabilities and measurable customer protection impact for identity systems.
Domain
Cybersecurity, Identity Protection, Threat Intelligence
Deliverable
production ML models | product features | research
Required skills
Windows internals, identity protocols (Kerberos, NTLM, LDAP, OAuth 2.0, SAML), Generative AI tool fluency, threat hunting, detection engineering, cross-group leadership
Preferred skills
C#, Python, C++, KQL, SQL, Cypher, Windows/Cloud forensics, external thought leadership (papers, talks, CVEs)
Technologies
GitHub Copilot, Security Copilot, ChatGPT, Claude, KQL, SQL, Cypher
Responsibilities
Set multi-quarter strategy from threat landscape framing to shipped detection, lead deep investigation of data to surface novel threats, design robust detection logics across the kill-chain, mentor and grow other researchers, shape team leverage of Generative AI
Seniority
Principal, strategy & mentorship