Principal Applied Threat Intelligence Manager at Microsoft

Department: Security Research

Compensation

$142,800 – $274,800/yr

Setup: On-site
Location: Redmond, Washington · Reston, Virginia
Type: Full-time
Level: lead/mgmt
Posted: Aug 6, 2026

Description

Microsoft is hiring a Security Research M5 to lead Applied Threat Intelligence analysts and manage threat-actor tracking, attribution, tradecraft analysis, intelligence pipelines, customer-facing reporting, and cross-functional partnerships. The role requires a relevant doctorate, master's, or bachelor's degree plus substantial experience in cybersecurity, threat analysis, or related fields, along with people-management experience. It requires Microsoft and Microsoft Cloud background checks and U.S. citizenship verification, and offers a U.S. base pay range of USD 142,800 to USD 274,800 per year, with higher ranges in the San Francisco Bay area and New York City metropolitan area.

Required Skills

Threat analysis
Threat actors
Threat reporting
Microsoft Sentinel
Defender XDR
Python
Binary analysis
MITRE ATT&CK

Additional Information

Minimum Education: Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or a related field
Required Previous Experiences: 3+ years of experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
1+ year of people management experience
Preferred Qualifications: 5+ years of experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
3+ years of people management and/or informal or indirect team leadership experience
10+ years of experience in cyber threat intelligence, threat hunting, incident response, or a closely related security discipline
Attribution experience creating threat groups and communicating attribution assessments
Experience producing finished threat intelligence reporting for technical and executive audiences
Experience with Microsoft Sentinel and Microsoft Defender XDR or comparable SIEM/XDR platforms
Understanding of adversary tradecraft, the cyber kill chain, and structured analytic frameworks
Written and verbal communication skills with a portfolio of public or customer-facing intelligence writing
Experience tracking and defending against financially motivated threat actors
Experience with endpoint, cloud, network, and identity-based attacks and datasets
Experience with AI tools, large language models, agents, and information security applications and pipelines
Comprehensive operating system security and internals knowledge
Understanding of network protocols and analytical experience with network infrastructure data and telemetry
Reverse-engineering and static and behavioral binary analysis experience
Functional understanding of common threat analysis models
Programming or scripting background in Python, PowerShell, C#, C++, or similar languages

About Microsoft

Microsoft

business applications

Download free Microsoft Outlook email and calendar, plus Office Online apps like Word, Excel, and PowerPoint. Sign in to access your Outlook email account.

View full company profile