Defense engineering team Threat Intelligence Center
Microsoft Threat Intelligence Center (MSTIC) is looking for a Security Software Engineer to join the Detection and Defense engineering team. The Center is focused on countering adversary-based threats to Microsoft and its customers through production and dissemination of threat intelligence, proactive hunting and incident response, and the development of new tools and approaches to detect adversary activity. Our largest scale deployment is part of O365 Exchange Online Advanced Threat Protection (ATP), where we process tens of millions of email attachments and URLs each day. Every new feature we deliver must balance technical tradeoffs between detection accuracy, release quality, and scalability. Our service presents challenges that span technical domains from kernel level and virtualization related issues, to data volume and service scalability related ones. We're looking for dedicated software engineers that enjoy working on cloud-scale problems, and are comfortable traversing whatever
The Software Engineer will be responsible for: Delivering a threat intelligence knowledge management system so threat analysts (hunters) capture the freshest intelligence and can put it to immediate use; Developing automation so incoming threat data and files can be automatically analyzed, monitored, and alerted on, speeding up the work of threat analysts by an order of magnitude; Interfacing between the curated intelligence and our product detection assets in Windows, Office 365, and Azure; Being part of a dynamic security community that would enable them to learn, collaborate, and contribute
Required Qualifications: A BS/MS in Computer Science or Computer Engineering, or comparable industry experience; 4+ years experience with programming skills (C# and/or Java) and understanding of data structures/algorithms; Preferred Qualifications: Knowledge of modern software design principles. For example: REST API design, microservices and service-oriented architecture; Experience with cloud scale storage and compute required (Cosmos DB, Azure, HDInsight, AWS); Previous experience in data analytics, fraud and machine learning are important, but a desire to take on big challenges and help improve