THREAT ANALYST / SECURITY RESEARCHER at Microsoft

THREAT ANALYST / SECURITY RESEARCHER Details

Dec. 17, 2018, 7:18 p.m.
Engineering
★★★★½
Individual Contributor
Full-Time
Redmond, WA
WDATP Research Team WDATP Research Team
The WDATP Research Team is looking for threat hunter. No matter how sophisticated attacker behaviors become, WDATP will help enterprises detect, investigate, and respond to advanced attacks and data breaches on their networks. Our research team uses deep knowledge of the attacker landscape and tradecraft to perform root-cause analysis to generate custom alerts, ensuring that WDATP customers are well equipped to quickly respond to human adversaries identified in their unique environments. Ensuring that no human adversary can operate silently begins with experts harnessing the powerful optics provided by WDATP, across the attacker kill-chain, coupled with world-class detections. We're looking for a skilled analyst to harness the power of Microsoft's intelligent security graph to quickly identify and report the latest human adversary behaviors, drive critical context-rich alerts, and help drive innovations for detecting advanced attacker tradecraft .

Explore large data sets to uncover novel techniques and attack origination to generate custom alerts for enterprise customers. Work with customer support teams to support root-cause investigations during an enterprise's time of need. Collaborate with our data science and threat research teams to develop accurate and durable cloud-based detections Build light-weight monitors for use in hunting and the discovery of human adversaries.
Required qualifications: 3 + years in cyber-security, cyber-defense, or cyber incident response Preferred qualifications: Skilled working with extremely large data sets, using tools and scripting languages like: Excel, SQL, Python, Splunk, and PowerBI. Excellent cross-group and interpersonal skills, with the ability to articulate business need for detection improvements. Strong ability to use data to 'tell a story'. Experience with reverse engineering, incident response, or machine learning models. Experience with advanced persistent threats and human adversary compromises. #WDATPRED
Learn more about this job

Similar jobs at Microsoft




Similar jobs at Amazon