Principal Strategist - Threat Intelligence & Protection

Overview

Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end to end, simplified solutions. The Microsoft Security organization accelerates Microsoft's mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers' heterogeneous environments, as well as ensuring the security of our own internal estate.

Microsoft Security Research is on the front line of this mission. Our Applied Threat Intelligence team tracks threat actors, their campaigns, targets, and changing tradecraft. We work across threat intelligence, research, engineering, incident response, and product teams to turn what we learn into detections, product experiences, managed services, and guidance that protects customers.

We are looking for a Principal Strategist - Threat Intelligence & Protection to set the direction for this work. This role will shape what intelligence we produce, how AI improves its speed and quality, how intelligence reaches Microsoft security products, and how Microsoft communicates it to customers and the security community. The strategist will connect work across Microsoft Defender XDR, Microsoft Sentinel, Defender Experts, Agentic Security, and Microsoft Threat Intelligence.

This is a individual contributor role with broad organizational influence. The successful candidate will bring deep threat intelligence judgment, strong product and business thinking, and working knowledge of security technologies. They will advise leaders, align teams across organizational boundaries, make clear investment choices, and serve as a spokesperson for Microsoft Threat Intelligence.

Responsibilities

• Define the multi-year strategy and investment priorities for Applied Threat Intelligence based on the threat landscape, customer needs, and Microsoft Security priorities.

• Shape the intelligence portfolio, including what Microsoft produces, which audiences it serves, and how it informs protection decisions.

• Drive threat intelligence into detections, product experiences, managed services, disruption, and customer guidance.

• Set the strategy for using AI to improve the speed, scale, and quality of intelligence production and delivery.

• Advise leaders on emerging threats, protection gaps, strategic choices, and their implications for Microsoft's security portfolio.

• Align threat intelligence, research, engineering, product, incident response, field, and communications teams around shared priorities.

• Shape Microsoft's threat intelligence narrative and represent it in executive briefings, customer engagements, industry forums, and public events.

• Establish standards and measures for intelligence quality, product adoption, time to protection, and customer impact.

Qualifications

Minimum Qualifications:

• Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 5+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
• OR Masters Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 6+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
• OR Bachelors Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 8+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
• OR equivalent experience.

Other Requirements:

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:

Microsoft Cloud Background Check:

• This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Preferred Qualifications:

• Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 8+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
• OR Masters Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 12+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
• OR Bachelors Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 15+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
• OR equivalent experience.
• 10+ years of experience in cyber threat intelligence, security research, incident response, security product strategy, or a related discipline.
• Proven track record of defining strategy and driving large-scale, cross-functional security initiatives.
• Understanding of the threat intelligence lifecycle, adversary tradecraft, analytic standards, and intelligence consumers.
• Experience translating threat intelligence into product priorities, detections, managed services, or customer guidance.
• Working knowledge of XDR, SIEM, detection engineering, security telemetry, and AI-assisted security workflows.
• Demonstrated ability to advise senior leaders and align teams across complex organizations without direct authority.
• Communication and executive presence, with experience in customer briefings, industry forums, or public-facing engagements.

#MSsecurity

Security Research IC6 - The typical base pay range for this role across the U.S. is USD $165,600 - $296,400 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $220,800 - $331,200 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:

https://careers.microsoft.com/us/en/us-corporate-pay

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.