1 Conduct proactive threat hunts across endpoint, identity, email, cloud, and other relevant security telemetry to identify indicators of compromise and previously unseen attacker behavior. 2 Investigate security alerts and suspicious activity, perform root-cause analysis, and develop a transparent understanding of attack scope, sequence, impact, and recommended response. 3 Analyze and correlate large, complex datasets to produce timely, context-rich findings and actionable insights for customers and internal partners. 4 Apply knowledge of attacker tradecraft, identity systems, authentication and authorization protocols, operating systems, and cloud environments to strengthen investigations and customer defenses. 4, Develop and improve high-fidelity hunting queries, detection logic, custom alerts, investigation methods, and response guidance. 5 Partner with security researchers, threat intelligence analysts, data scientists, and engineers to convert frontline findings into durable detection and product improvements. 6 Document technical findings and communicate complex investigations clearly to both technical and non-technical stakeholders.



Working knowledge of threat analysis models and frameworks such as the Cyber Kill Chain and MITRE ATT&CK.; 1. Bachelor's or master's degree in computer science, cybersecurity, engineering, or a related technical field, or equivalent practical experience. Ability to analyze complex technical evidence, form and test hypotheses, and translate findings into clear actions. Global mission: Help defend enterprise customers around the world against sophisticated and fast-moving threats. Cutting-edge work: Investigate emerging adversary behavior and solve security problems that do not yet have established playbooks. End-to-end impact: Connect live customer investigations to better hunting, stronger detections, improved operational workflows, and product feedback. Continuous challenge: Expand your skills across platforms, attack surfaces, and adversary techniques while making decisions in ambiguous, high-impact situations. This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. *

📌 Security Researcher II (Hyderabad)
🏢 Microsoft
📍 Hyderabad