Staff Visionary Technologist, Security and AI Research

Microsoft runs on trust. Earning and keeping that trust has never been more important. In the Corporate, External and Legal Affairs (CELA) Customer Security and Trust (CST) team, we work with each other, and with many different partners internal and external to Microsoft to spearhead cybersecurity policies globally, to protect Microsoft Customers and defend the global Digital Ecosystem. We focus aggressively on AI and build engineering solutions to speed up, scale, and transform our work. The Cybersecurity & Trust Engineering (CSTE) team within CST is the central driving force behind engineering and cybersecurity initiatives for CST and Microsoft CELA. The CELA CSTE team is seeking a Staff Visionary Technologist, Security and AI Research to connect, bridge, and integrate Security Research, AI, and other advanced technology research with digital crime investigations and legal strategies. This role aims to innovate and scale Microsoft's impact by countering, disrupting, and neutralizing the weaponization of digital technologies and AI that undermine global trust in the digital ecosystem. The goal is to champion global trust in digital technologies and AI, empowering society to safely and confidently harness their full potential for the betterment of all. The candidate will possess extensive experience in Security Research, with a deep understanding of tools, techniques, and methodologies used in both cyber defense and offense. Additionally, they will have advanced expertise in Technology Research within the fields of computer science, AI/ML, and software engineering. The candidate will exhibit insatiable curiosity and an innovative spirit, coupled with an open mindset that embraces and learns from boundaryless, cross-domain partnership. Microsoft is on a mission to empower every person and every organization on the planet to achieve more. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world. You can help us achieve our mission. Responsibilities Security Research: Conduct reverse malware engineering, including comprehensive binary disassembly, dynamic and static analysis, and kernel-mode debugging in rootkits. Identify and defeat anti-reverse engineering techniques and perform forensic analysis across various technical layers (e.g., network, memory). Technology Research: Conduct scoped technology research to contribute to innovative explorations with measurable, specific outcomes. Create prototypes and perform experimentation to test new ideas and tools. Continuously evaluate and refine research methodologies to enhance the effectiveness and impact of technological innovations. Multidisciplinary Partnership & Matrix Engagement: Partner with investigators and attorneys to transform legal strategies and investigation needs into mission-centric research questions. Collaborate with engineers and developers to integrate research findings into products and services. Work with multidisciplinary teams to ensure research findings are applied practically and align with organizational goals. Ownership and Continuous Growth : Establish and cultivate partnerships with research teams, security teams, and engineering teams within Microsoft and across the industry. Stay current with rapidly evolving cybersecurity offensive techniques and emerging technologies. Publish and present findings to build and maintain customer trust. Embody our Culture ( & Values ( Qualifications Required Qualifications: 7+ years experience in software development lifecycle, large-scale computing, modeling, cybersecurity, and/or anomaly detection OR Doctorate in Statistics, Mathematics, Computer Science or related field. 7+ years experience in malware reverse engineering 5+ years experience in security testing (penetration testing) activities 5+ years experience in developing security tools and automation in python OR C# Preferred Qualifications: Advanced degree in a Science or Engineering Discipline AND 10+ years' combined experience in security OR technology research in an industry OR academic setting Solid understanding of Windows Operating System Internals, Windows APIs, and Network Protocols Solid understanding of cryptographic algorithms and techniques 10+ year experience combined in various security research domains, including reverse engineering of malware OR other cyber threats, AND incident response 5+ year experience in using reverse engineering tools such IDAPro, Ghidra, and x86/x64dbg, including writing custom scripts and plugins for it 3+ year experience in AI/ML, especially its application in cybersecurity defensive and offensive techniques 2+ year experience in system, memory, and network forensics 1+ years' experience with law enforcement OR legal professions Advanced understanding in anti-malware technology, different kinds of detections (file, memory, and behavior) Solid background with programming languages and framework, such as C/C++, C#, .NET, Python and other scripting languages. Solid background in with commonly used tools for Threat Intelligence exchange (e.g., STIX) Proactiveness; a positive outlook and approach to change management Be a self-starter with attention to detail and desire to learn new technologies Ability to influence others inside and outside of direct team Verbal and written communication skills Able to organize, schedule work and communicate effectively in a fast-paced environment. Able to work under pressure and deadlines, with ability to manage complexity while driving clarity Able to maintain confidentiality Able to work in a matrix environment Security Research IC5 - The typical base pay range for this role across the U.S. is USD $137,600 - $267,000 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $180,400 - $294,000 per year. Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: Microsoft will accept applications for the role until October 31, 2024 #CELA Microsoft is an equal opportunity employer. Consistent with applicable law, all qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations ( .

Created: 2024-10-29