Principal Security Researcher

6 months ago

Sydney, Australia Microsoft Full time

Overview

The mission of Microsoft Security Response Center (MSRC) is to enable Microsoft to build the most trusted devices and services, while keeping our company safe and our data protected. ​As part of the Microsoft Security organization, and a steward of Microsoft and our customer’s data, a core function of MSRC is ensuring the security of every aspect of the business. MSRC is responsible for company-wide information security and compliance, with a strategic focus on information protection, assessment, awareness, governance, and enterprise business continuity. As customer zero, we deploy and secure these services inside Microsoft and then share best practices with enterprise customers at scale across the globe. We have exciting opportunities for you to innovate, influence, transform, inspire and grow within our organization and we encourage you to apply to learn more 

Do you want to join the Microsoft GHOST team as a Principal Security Researcher?


Do you have an interest in helping Microsoft’s clients defend themselves against targeted exploitation? Are you interested in being intimately involved in the latest, cutting edge developments in the security industry and having a direct impact on the security of all Microsoft customers? Do you want to be on the front lines of helping our customers go toe-to-toe against advanced adversaries? Are you interested in a fast-paced job full of new opportunities? If so, you might be a candidate for the Global Hunting, Oversight, and Strategic Triage team (GHOST).


We are looking for an experienced Principal Security Researcher with required analytical background to join our team to perform threat hunts, assist with investigations, develop threat intelligence, and to cultivate investigation best practices into Microsoft tooling and products. Researchers will support a global team to identify and catalog new attacker Tools, Techniques and Procedures (TTPs), victims, and deliver customer notifications to protect worldwide enterprise customers and empower customers to protect themselves via constantly improving Microsoft products.

We are looking to fill multiple roles across levels.

Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more.

Qualifications

Required Qualifications:

7+ years experience in large-scale computing, modeling, cybersecurity, and/or anomaly detection
OR Experience with threat hunting/ digital forensics/reverse engineering/incident response etc.OR Master's Degree in Statistics, Mathematics, Computer Science or related field

Other Requirements:

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Preferred Qualifications:

Investigation/Cybersecurity/Digital Forensics/DFIR (Digital Forensic Incident Response) certifications (e.g. Certified Information Systems Security Professional (CISSP), SysAdmin, Audit, Network and Security (SANS), Global Information Assurance Certification (GIAC) etc.)  Technical certifications based on domain (e.g., Azure, SharePoint)
Experience with Active Directory and/or cloud identity Experience with sophisticated threat actor evidence including familiarity with typical Indicators of Compromise (IOCs), Indicators of Activity (IOAs) and Tools, Techniques and Procedures (TTPs) Use of forensic analysis tools such as X-Ways Forensics®, WinHex®, Encase®, FTK®, etc. Microsoft Azure and/or Office365 platform knowledge and experience Experience with various forensic log artifacts found in Security Informationa and Event Management (SIEM) logs, web server logs, Antivirus (AV) logs, protection logs such as Host-based Intrusion Detection Systerm (HIDS) and Network Intrusion Detection System (NIDS) logs Familiarity with Microsoft Defender 365 security stack (for Endpoints, Identity, Cloud, etc), especially with Advanced Hunting query writing Understanding of Windows and Azure internals and where trace evidence can be found Knowledge of third-party cybersecurity solutions, especially Extended Detection and Response (EDR) and Security Information and Event Management (SIEM) solutions Experience working with consulting companies is a plus Linux and/or macOS forensic analysis and threat hunting skills

#GHOST #DSR #MSFTSecurity

Responsibilities

This role is part of a collaborative team, assisting our customers with:

Leading analysis of attacker activity in on-premises and cloud environments Identifying potential threats, allowing for proactive defence before an actual incident Notifying customers regarding imminent attacker activity Providing recommendations to improve customers’ cybersecurity posture going forward and performing threat intelligence knowledge transfer to prepare customers to defend against today’s threat landscape Building proof-of-concept and prototype threat hunting tools, automations, and new capabilities Driving product and tooling improvements by conveying learnings from threat hunting and incident response at scale to engineering partner teams Identifying, prioritizing, and targeting complex security issues that cause negative impact to customers. Creating and driving adoption of relevant mitigations and provide proactive guidance

Collaborating with others to synthesize research findings into recommendations for mitigating security issues and sharing them across teams. Driving change within the team based on the research findings.

If you are looking for a role that will allow you to use your knowledge and experience to strengthen the security posture of customers, you will have a bright future within our Microsoft’s Global Hunting Oversight and Strategic Triage team.

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.Industry leading healthcareEducational resourcesDiscounts on products and servicesSavings and investmentsMaternity and paternity leaveGenerous time awayGiving programsOpportunities to network and connect

  • Principal Security Researcher

    1 month ago

    Sydney, New South Wales, Australia Microsoft Full time

    OverviewThe Microsoft Security Response Center (MSRC) is dedicated to building the most trusted devices and services while ensuring the security of every aspect of the business. As a steward of Microsoft and customer data, MSRC is responsible for company-wide information security and compliance, with a strategic focus on information protection, assessment,...

  • Principal Security Researcher

    1 month ago

    Sydney, New South Wales, Australia Microsoft Full time

    Job DescriptionMicrosoft is seeking a highly skilled Principal Security Researcher to join our Global Hunting, Oversight, and Strategic Triage (GHOST) team. As a key member of our team, you will be responsible for leading analysis of attacker activity in on-premises and cloud environments, identifying potential threats, and notifying customers regarding...

  • Principal Security Architect

    1 month ago

    Sydney, New South Wales, Australia Amazon Full time

    Job Title: Principal Security EngineerWe are seeking an experienced Principal Security Engineer to join our Security team in Australia. As a key member of our team, you will be responsible for conducting both pre and post-launch testing, offensive campaigns, emergent threat testing, creating/maintaining automated threat emulation solutions, and helping...

  • Principal Advisor, Research

    5 months ago

    Sydney, Australia Centre for Evidence and Implementation Full time

    About the role - Are you an expert in research, evaluation and implementation science? Are you passionate about pioneering new models of evaluation and creating lasting and effective social change? Are you interested in joining a diverse, global team that values its people, nurtures professional growth and emphasizes collaboration? If so, the CEI team would...

  • Principal Security Advisor

    4 months ago

    Sydney, Australia Vero Insurance Full time

    Jobs - Job Details - Principal Security Advisor Careers at Suncorp Take the next step. Be part of something bigger at Suncorp. Principal Security Advisor Job No: 672284 Sydney - Inner Suburbs & CBD, Brisbane - Inner Suburbs & CBD, Various Max Term Full Time IT Pay Band 6 We’re never just satisfied with how things are – because we know how things...

  • Principal Research Consultant

    3 days ago

    Sydney, New South Wales, Australia Legal Aid NSW Full time

    At Legal Aid NSW, we are seeking a Principal Research Consultant to join our team. This is a challenging and rewarding role that involves undertaking research and project tasks to support the development of evidence-based policies and programs.The successful candidate will have a tertiary qualification in a relevant discipline such as statistics,...

  • Principal Intel Security Advisor

    6 months ago

    Sydney, Australia Vero Insurance Full time

    Jobs - Job Details - Principal Intel Security Advisor Careers at Suncorp Take the next step. Be part of something bigger at Suncorp. Principal Intel Security Advisor Job No: 671679 Sydney - Inner Suburbs & CBD, Brisbane - Inner Suburbs & CBD, Melbourne - Inner Suburbs & CBD Permanent Full Time IT Pay Band 6 Provide Cyber Security intelligence to the...

  • Principal Product Security Engineer

    1 month ago

    Sydney, New South Wales, Australia Boeing Full time

    Job Title: Principal Product Security EngineerAt Boeing, we are seeking an experienced Principal Product Security Engineer to join our innovative team. As a key member of our team, you will play a critical role in ensuring the security of our products and systems.About the RoleThe Principal Product Security Engineer will be responsible for leading the cyber...

  • Security Advisor Principal

    1 month ago

    Sydney, New South Wales, Australia Vero Insurance Full time

    Principal Security AdvisorAt Vero Insurance, we're seeking a highly skilled Principal Security Advisor to join our Cyber Security and Risk domain. As a key member of our team, you'll provide technical leadership, consulting, and advice to ensure our technology compliance with cyber security principles, policies, and standards.Key Responsibilities:Provide...

  • Principal Product Security Engineer

    1 month ago

    Sydney, New South Wales, Australia Boeing Full time

    Job Title: Principal Product Security EngineerAt Boeing, we are seeking an experienced Principal Product Security Engineer to join our innovative team. As a key member of our team, you will play a critical role in ensuring the security of our products and systems.About the RoleThe Principal Product Security Engineer will be responsible for leading the cyber...

  • Principal Engineer

    4 weeks ago

    Sydney, New South Wales, Australia Westpac Full time

    About the RoleWe are seeking an experienced Principal Engineer to join our Westpac Open Banking Program. As a key member of our team, you will be responsible for designing and developing secure and scalable integration solutions for our digital identity applications.Key ResponsibilitiesDevelop and maintain integration strategies, roadmaps, and policies for...

  • Information Security Principal Consultant

    5 months ago

    Sydney, Australia Westpac Group Full time

    **How will I help?** Westpac’s Detection and Response team sits within our Information Security Group and is responsible for monitoring and detecting cyber threats. We analyse and respond to attacks from adversaries targeting the Westpac Group or its customers. We are looking for an Information Security Principal Consultant to join the Security...

  • Principal Engineer

    1 month ago

    Sydney, New South Wales, Australia Westpac Full time

    About the RoleWe are seeking an experienced Principal Engineer to join our Westpac Open Banking Program. As a key member of our team, you will be responsible for designing and developing secure and scalable integration solutions for our digital identity applications.Key ResponsibilitiesDevelop and maintain integration strategies, roadmaps, and policies for...

  • Cyber Security Principal Advisor

    1 month ago

    Sydney, New South Wales, Australia Vero Insurance Full time

    Principal Cyber Advisor GRC Job DescriptionAbout the RoleThe Principal Cyber Advisor, Governance, Risk and Compliance (GRC), plays a critical role in coordinating and overseeing activities across the Cyber Security team. This position involves managing work to standardize governance, risk management, and compliance across Cyber Security, ensuring the ability...

  • Principal Architect

    6 months ago

    North Sydney, Australia TPG Telecom Full time

    We’ve only just begun, but what a beginning. In a once in a generation moment, we’ve brought together powerful brands to create one united force. TPG Telecom has a powerhouse of brands which include Vodafone, TPG, iiNet, Internode, Lebara, AAPT and felix. The latest technology and brave thinking let us connect our people and communities. You could play...

  • Principal Engineer

    4 weeks ago

    Sydney, New South Wales, Australia Westpac Group Full time

    Job Title: Principal Engineer - Identity and Security ExpertWe are seeking an experienced Principal Engineer to join our team at Westpac Group. As a key member of our Open Banking Program, you will be responsible for designing and developing secure identity and access management solutions.About the Role:Design and develop secure identity and access...

  • Principal Engineer

    4 weeks ago

    Sydney, New South Wales, Australia Westpac Group Full time

    Job Title: Principal Engineer - Identity and SecurityWe are seeking an experienced Principal Engineer to join our team at Westpac Group. As a key member of our Open Banking Program, you will be responsible for designing and developing secure identity and security solutions for our digital applications.About the Role:Develop and maintain integration strategy,...

  • Principal Security Advisor

    1 month ago

    Sydney, New South Wales, Australia Suncorp Group Full time

    About the RoleWe are seeking a highly skilled Principal Security Advisor to join our Cyber Security and Risk domain at Suncorp Group. As a key member of our team, you will provide technical leadership, consulting, and advice to ensure our technology compliance with cyber security principles, policies, and standards are robust and our security domain...

  • Principal Architect

    5 months ago

    North Sydney, Australia TPG Telecom Full time

    We’ve only just begun, but what a beginning. In a once in a generation moment, we’ve brought together powerful brands to create one united force. TPG Telecom has a powerhouse of brands which include Vodafone, TPG, iiNet, Internode, Lebara, AAPT and felix. The latest technology and brave thinking let us connect our people and communities. You could play...

  • Principal Technical Product Manager

    5 months ago

    Sydney, Australia Atlassian Full time

    Overview: **Working at Atlassian** Atlassians can choose where they work - whether in an office, from home, or a combination of the two. That way, Atlassians have more control over supporting their family, personal goals, and other priorities. We can hire people in any country where we have a legal entity. Interviews and onboarding are conducted virtually,...