Principal Security Researcher

Microsoft Corporation

Redmond, WA

Apply

JOB DETAILS

SALARY

$142,800–$274,800 Per Year

SKILLS

Analysis Skills, Artificial Intelligence (AI), Automation, Background Investigation, Campaigns, Cloud Computing, Computer Science, Computer Security, Defense Intelligence, Emulators, GPEN - GIAC Penetration Tester, Implants, Internet Security, Machine Tool, Malware, Mathematics, Mentoring, Microsoft Product Family, Microsoft Windows System Internals/Programming, Regulations, Research Skills, Reverse Engineering, Security Analysis, Simulation, Software Development Lifecycle (SDLC), Software Engineering, Software as a Service (SaaS), Statistics, Technical Leadership, Technical Presentation, Technical Strategy, Telemetry, Threat Modeling

LOCATION

Redmond, WA

POSTED

19 days ago

**Overview** Security is one of the most critical priorities for our customers in a world of growing digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world safer by empowering every user, customer, and developer with a security cloud that delivers end-to-end, simplified protection. The Microsoft Security organization advances this mission by helping secure digital technology platforms, devices, and clouds across customers' heterogeneous environments, while also protecting Microsoft's internal estate. Our culture is grounded in a growth mindset, inspiring excellence, and enabling teams and leaders to bring their full potential each day. The Microsoft Threat Protection Research (MTP-R) Purple Team sits at the intersection of offense, defense, and intelligence, working across Microsoft Defender technologies to ensure telemetry, detections, and protections are effective against real-world cyberattacks. We are looking for a Principal-level red team security researcher with experience in adversary emulation, offensive tooling, and malware development to design and execute realistic attack simulations in an AI-first environment. This role will use agentic systems and LLM-driven workflows to scale attack development, automation, and simulation fidelity, while helping shape how AI-enabled offensive research is used to emulate modern adversaries in controlled, high-impact ways. This role is for someone who has experience in offensive security and wants to shape how AI-enabled adversary emulation is performed at scale. You will define methodologies, influence product direction, and drive innovation in agentic red team capabilities. **Responsibilities** As a Principal Security Researcher (Red Team), you will: · Lead the design and execution of complex, multi-stage adversary simulations across endpoint, identity, cloud, and SaaS environments. · Architect and develop advanced offensive tooling, including scalable C2 frameworks, custom implants, and malware tradecraft. · Conduct deep research into modern attacker techniques, including novel evasion strategies, cloud abuse patterns, and identity-based attacks. · Drive threat modeling and adversary emulation strategy, aligning simulations with real-world campaigns and emerging threats. · Leverage and contribute to threat intelligence by producing new insights from simulation results, tradecraft research, and adversary behavior analysis. · Design and implement AI-enabled and agentic systems to automate offensive operations, generate adaptive attack paths, and scale simulation complexity. · Evaluate the effectiveness of defensive systems, including AI-driven detections, and provide strategic recommendations for improvement. · Partner with engineering, detection, and intelligence teams to influence product direction and improve security outcomes. · Deliver executive-level briefings, technical reports, and strategic recommendations. · Act as a technical leader, shaping offensive research methodology, mentoring team members, and driving long-term innovation. **Qualifications** **Minimum Qualifications:** + Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection. + OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection. + OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 6+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection. + OR equivalent experience. **Other Requirements:** Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: + This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter. **Preferred Qualifications:** + Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 5+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection. + OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 8+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection. + OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 12+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection. + OR equivalent experience. + 5+ years of experience in red teaming, offensive security, or adversary emulation. + Security related certifications such as OSCP, OSCE, OSEP, OSWE, GPEN, GXPN, GREM + Expertise in C2 framework design, implant development, and offensive infrastructure. + Background in malware development, reverse engineering, or exploit development. + Experience leveraging and producing threat intelligence at the campaign or actor level. + Knowledge of MITRE ATT&CK and threat modeling methodologies. **\#MSFTSecurity** Security Research IC5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year. Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations. (https://careers.microsoft.com/v2/global/en/accessibility.html)

About the Company

Microsoft Corporation

DO WHAT YOU LOVE
Make your mark on the world’s most used technologies. Develop the next hit mobile application. Pioneer a startup that could be the next big thing. At Microsoft, you choose your path.

Headquartered in Redmond, Washington, Microsoft is a top innovator in both the consumer and enterprise technology industry. Just a few of the many things our products do are unleash creativity, connect businesses, and make learning more fun. But our continued success is based on one thing: our employees. We hire amazing, talented people and give them the opportunities—and the tools—to succeed.

WHY MICROSOFT?
As a Microsoft employee, you’re surrounded by a diverse group of the smartest people in your field. This fosters new ideas, better business results, and creates a dynamic work environment. In the office, you’re constantly challenged and supported by your colleagues. Every day holds something new and exciting.

We also offer unparalleled depth and breadth of career opportunities. As an industry leader in multiple fields, working for Microsoft means being able to do whatever you feel passionate about—and being able to make an impact in that field. From day one, we give our employees significant responsibility. This means that you’ll know that you directly contributed to something that has a positive impact on people worldwide. Whether you choose to work in management, dive deep into the newest technology, or explore multiple professions, you’ll find everything you need at Microsoft to drive your career—and to make a difference.

WE GET IT – YOU’RE MORE THAN YOUR JOB
Everyone works differently and is motivated by different things. We also understand that there’s more to you than your job. That’s why we offer competitive pay and a wide assortment of benefits-- to help you make the most of life at work and away from it.

GET THE BALL ROLLING

COMPANY SIZE

10,000 employees or more

INDUSTRY

Other/Not Classified

FOUNDED

1975

WEBSITE

http://www.microsoft.com

Resume Resources

Free Resume Templates Free Resume Builder