Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end to end, simplified solutions. The Microsoft Security organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world.

The Defender Experts (DEX) Research team is at the forefront of Microsoft’s threat protection strategy, combining world-class hunting expertise with AI-driven analytics to protect customers from advanced cyberattacks. Our mission is to move protection left—disrupting threats early, before damage occurs—by transforming raw signals into intelligence that powers detection, disruption, and customer trust. We’re looking for a passionate and curious Senior Threat Graph Researcher to join this high-impact team.

In this role, you will be responsible for designing, building, and analyzing large-scale threat graphs that model adversary behavior, infrastructure, and relationships across the cyber threat landscape. You will collaborate closely with researchers, analysts, and detection engineers at the intersection of graph theory, threat protection, and machine learning, helping to uncover hidden patterns, identify emerging threats, and drive proactive defense strategies to drive research on emerging cloud threats that impact both Microsoft and third-party products. Your research will directly contribute to the development of real-time protections for enterprises worldwide, ensuring comprehensive coverage across cloud platforms and strengthening the security posture of organizations leveraging a heterogeneous mix of technologies. This is a unique opportunity to work at scale, tackle complex cloud security challenges, and shape the evolution of threat research within Microsoft Security.

We are seeking a Senior Threat Graph Researcher with a deep expertise in modeling, analyzing, and interpreting large-scale threat graphs to advance the frontiers of cloud security. The ideal candidate will possess hands-on experience architecting and deploying graph-based detection solutions, including designing graph schemas, implementing algorithms for malicious pattern discovery, and operationalizing analytics for multi-tenant environments. In this pivotal role, you will lead research on evolving adversary behaviors, innovate new methods for graph intelligence and automated threat disruption, and collaborate cross-functionally to enhance Microsoft Security’s ability to detect, attribute, and neutralize sophisticated attacks. Your work will be instrumental in shaping the next generation of threat graph technologies, empowering the security team to protect complex, heterogeneous cloud ecosystems with actionable insights.

Responsibilities include:

• Design and maintain scalable threat graphs that model entities such as devices, identity, threat actors, TTPs, infrastructure, and campaigns.

• Lead and execute advanced research to develop algorithms and heuristics to detect malicious patterns and relationships within graph data on emerging cloud-based threats impacting Microsoft and third-party security products across heterogeneous cloud environments.

• Collaborate with threat protection researchers, data scientists, and detection engineers to enrich graph models with contextual insights and refine detection and response strategies, to provide comprehensive threat coverage and response capabilities.

• Research and prototype novel graph-based techniques for threat detection, attribution, and prioritization in collaboration with internal and external security teams.

• Translate complex raw security data into actionable graph intelligence that enhances the effectiveness of security operations for a global customer base.

• Mentor, guide, and drive best practices among researchers and detection engineers on advanced graph-based threat hunting and incident response across diverse ecosystems.

• Contribute to industry knowledge and Microsoft’s security posture by publishing research, developing threat graph models, and proactively identifying threats and attack trends in the cloud.