Overview

Microsoft Defender for Endpoint (MDE) is a product for preventative protection, post-breach detection, automated investigation, and response. Our team, the core machine learning and data science team, is a cross-discipline team responsible for building ML, LLM, and automation solutions that defend over a billion end users and enterprises from cybersecurity attacks through Microsoft Defender Anti Virus, Microsoft Defender Endpoint Detection and Response, and Network Protection products. We are a mix of machine learning engineers, data scientists, data engineers, and security researchers who develop big data pipelines, run experiments, and deploy our protection to production to protect customers at scale.

We are looking to hire an Early in Career Security Researcher who has a passion for a role focusing on investigating attacks, working with big data and LLMs, and engineering defensive solutions to the latest attacks**.**

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.

• Responsibilities- Investigate attacks through threat hunting on top of product telemetry - identifying protection gaps and opportunities for systems to better protect our customers.
• Experiment with and apply large language models and agentic systems to protect our customers and improve our internal systems.
• Propose, design, experiment, and implement machine learning and automation designs to protect our customers.
• Collaborate closely with engineering and product teams to design security sensors, validate protection concepts, and measure effectiveness using data-driven methodologies.
• Own end-to-end lifecycle from hypothesis to productionization.

Qualifications:

Required qualifications:

• Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field OR equivalent experience.

Preferred qualifications :

• 1+ years of experience in software development.
• 1+ years of experience with large-scale data, utilizing either distributed data processing frameworks (e.g., Apache Spark, Hadoop), real-time data streaming platforms (e.g., Kafka), or query languages like SQL and KQL.
• 1+ years of experience with Large Language Models and/or agentic systems.

Security Research IC2 - The typical base pay range for this role across the U.S. is USD $84,200 - $165,200 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $109,000 - $180,400 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.