M
HyderabadSecurity ResearchTop payGCC
Apply on Microsoft →Research Microsoft before you apply
Check ratings, real-employee reviews, verified pay, and interview difficulty.
Research real-world hybrid attacks that move between cloud services, endpoints, identity and AI systems. Analyse live attacker behavior, production incidents and customer feedback to build high-signal detections and improve existing ones. Partner with in-house AI teams to advance AI security, detection quality and explainability. Build innovative tools, automation and research prototypes that scale globally. Collaborate closely with product, engineering and global research teams to turn ideas into impact. 8+ years of experience in cybersecurity, with strong hands-on understanding of the modern attacker kill chain, MITRE ATT&CK framework, and evolving cloud-based threats, including attacks targeting Enterprise Apps, and emerging AI-driven applications. Proven experience securing cloud and containerized environments, with hands‑on knowledge of Azure, AWS, and/or GCP, and technologies such as Kubernetes, container platforms, Storage, Key Vault, DNS and cloud services. Deep knowledge of adversary tooling, red team frameworks, and attacker techniques, with the ability to analyse, simulate, and interpret real-world attacker behaviors across cloud ecosystems. Proficiency in at least one programming language (e.g., Python, C, or C++) for building research prototypes, internal tools, automation, or detection logic. Strong proficiency in query languages such as KQL, SQL, or Cypher for large-scale telemetry analysis, threat hunting, behavioral investigations, and detection validation. Experience working with large-scale datasets to support detection development, proactive threat hunting, behavioral analytics, and signal quality improvement. Strong collaboration and communication skills, with the ability to clearly articulate research insights, influence product and engineering decisions, and work effectively with partner teams, including Engineering, Data Science, and incident response stakeholders. Bachelor's or Master's degree in Computer Science, Engineering, or a related technical discipline, or equivalent practical experience in security research or threat detection.