Senior Applied Threat Intelligence Analyst - Microsoft Security Threat Response at Microsoft

Department: Security Research

Compensation

$119,800 – $234,700/yr

Setup: On-site
Location: Redmond, Washington
Type: Full-time
Level: senior
Posted: Jul 31, 2026

Description

Microsoft is hiring a Senior Applied Threat Intelligence Analyst to produce customer-facing and internal threat intelligence reports, build pipelines and workflows for scalable intelligence delivery, represent Microsoft in customer and industry engagements, translate technical findings into actionable insights, and partner with product, engineering, and research teams to operationalize intelligence in Microsoft security platforms. The role requires a relevant doctorate, or a master's degree with 3+ years of experience, or a bachelor's degree with 4+ years of experience, along with cybersecurity, threat analysis, reporting, and Microsoft Sentinel or Defender XDR experience. The typical U.S. base pay range is USD $119,800-$234,700 per year, with higher ranges for the San Francisco Bay area and New York City metropolitan area.

Required Skills

Threat intelligence
Microsoft Sentinel
Defender XDR
Python
KQL
SQL
PowerShell
Malware analysis
MITRE ATT&CK

Additional Information

Minimum Education: Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or a related field; alternatively, a master's degree with 3+ years of relevant experience, or a bachelor's degree with 4+ years of relevant experience.
Required Previous Experiences: 3+ years of experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
4+ years of experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
Preferred Qualifications: 5+ years of experience in cyber threat intelligence, threat hunting, incident response, or a closely related security discipline.
Experience producing finished threat intelligence reports for technical audiences.
Experience creating threat group attributions and communicating attribution assessments.
Experience with Microsoft Sentinel and Microsoft Defender XDR or comparable SIEM/XDR platforms.
Understanding of adversary tradecraft, the cyber kill chain, MITRE ATT&CK, the Diamond Model, and structured analytic techniques.
Written and verbal communication skills with a portfolio of public or customer-facing intelligence writing.
Experience analyzing endpoint, cloud, identity, and network telemetry.
Familiarity with Python, KQL, SQL, and PowerShell.
Understanding of operating system internals, network protocols, and common attack techniques.
Exposure to reverse engineering or malware analysis.
Programming or scripting background in Python, PowerShell, C#, C++, or similar languages.

About Microsoft

Microsoft

business applications

Download free Microsoft Outlook email and calendar, plus Office Online apps like Word, Excel, and PowerPoint. Sign in to access your Outlook email account.

View full company profile