OverviewMicrosoft Security Research is on the front line of this mission. Our Applied Threat Intelligence team tracks threat actors, their campaigns, targets, and changing tradecraft. We work across threat intelligence, research, engineering, incident response, and product teams to turn what we learn into detections, product experiences, managed services, and guidance that protects customers.
We are looking for a
Principal Strategist - Threat Intelligence & Protection to set the direction for this work. This role will shape what intelligence we produce, how AI improves its speed and quality, how intelligence reaches Microsoft security products, and how Microsoft communicates it to customers and the security community. The strategist will connect work across Microsoft Defender XDR, Microsoft Sentinel, Defender Experts, Agentic Security, and Microsoft Threat Intelligence.
This is a individual contributor role with broad organizational influence. The successful candidate will bring deep threat intelligence judgment, strong product and business thinking, and working knowledge of security technologies. They will advise leaders, align teams across organizational boundaries, make clear investment choices, and serve as a spokesperson for Microsoft Threat Intelligence.
Responsibilities- Define the multi-year strategy and investment priorities for Applied Threat Intelligence based on the threat landscape, customer needs, and Microsoft Security priorities.
- Shape the intelligence portfolio, including what Microsoft produces, which audiences it serves, and how it informs protection decisions.
- Drive threat intelligence into detections, product experiences, managed services, disruption, and customer guidance.
- Set the strategy for using AI to improve the speed, scale, and quality of intelligence production and delivery.
- Advise leaders on emerging threats, protection gaps, strategic choices, and their implications for Microsoft's security portfolio.
- Align threat intelligence, research, engineering, product, incident response, field, and communications teams around shared priorities.
- Shape Microsoft's threat intelligence narrative and represent it in executive briefings, customer engagements, industry forums, and public events.
- Establish standards and measures for intelligence quality, product adoption, time to protection, and customer impact.
QualificationsMinimum Qualifications:- Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 5+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
- OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 6+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
- OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 8+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
- OR equivalent experience.
Other Requirements:Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:
Microsoft Cloud Background Check:
- This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.
Preferred Qualifications:- Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 8+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
- OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 12+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
- OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 15+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
- OR equivalent experience.
- 10+ years of experience in cyber threat intelligence, security research, incident response, security product strategy, or a related discipline.
- Proven track record of defining strategy and driving large-scale, cross-functional security initiatives.
- Understanding of the threat intelligence lifecycle, adversary tradecraft, analytic standards, and intelligence consumers.
- Experience translating threat intelligence into product priorities, detections, managed services, or customer guidance.
- Working knowledge of XDR, SIEM, detection engineering, security telemetry, and AI-assisted security workflows.
- Demonstrated ability to advise senior leaders and align teams across complex organizations without direct authority.
- Communication and executive presence, with experience in customer briefings, industry forums, or public-facing engagements.
#MSsecuritySecurity Research IC6 - The typical base pay range for this role across the U.S. is USD $165,600 - $296,400 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $220,800 - $331,200 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
