Service Delivery Expert, Microsoft Defender

Supports research and data gathering for security analysis and contributes insights under guidance. Understands operational requirements in developing security solutions and assists in process improvement identification. Identifies security issues and implements mitigation steps. Supports data structuring and ensures data quality compliance. Partners with others to solve complex security problems and assists in refining analysis techniques. Investigates security incidents and leads security reviews while applying best practices. Leverages industry knowledge to contribute to community activities and supports standard development.

Conducting Research

• Supports more experienced analysts in developing insights and identifying potential security vulnerabilities and threats. Begins to understand and account for operational requirements when supporting the development or implementation of security solutions. Assists in the identification of areas for process improvements within the security domain. Contributes to the discussion on prioritization methodologies and apply them under guidance to support the team's objectives. Compiles and organizes data from various sources, with guidance from more experienced team members to refine the understanding of threat landscapes. Utilizes existing tools and software to assist in optimizing data analysis processes.
• Supports research into security areas by gathering data and information on Microsoft, supported, and/or competitor products vulnerable to exploitation, tracking current or potential future attacks, and/or studying academic literature as directed. Assists in analyzing security threats and contributes to summarizing the findings under supervision. Collaborates with team to propose solutions that enhance security, including for integration in or addition to new/existing products or features. Leverages artificial intelligence (AI) workflows to understand research operations and how customers use Microsoft products. Aids in the creation of security analysis plans, ensuring they consider product timelines and feature scopes with guidance.
• Supports efforts to clean, structure, enrich, and standardize data and data sources to make them ready for further handling. Contributes to data quality efforts to maintain reliable access to data sources, ensuring adherence to proper protocols and privacy regulations during data preparation. Assists in the curation of data sources and works with partners to maintain data access within the team. Helps incorporate new data sources in line with corporate data privacy standards.

Industry Leadership

• Leverages working knowledge to identify potential security issues, tools, mitigations, and processes (e.g., architecture, failure modes, attack chain, threat modeling, vulnerabilities) with minimal guidance. Researches and develops knowledge of industry trends, technologies, tools, securities, and advances. Participates in internal and external community through publications, white papers, seminars, or conferences, shaping understanding of threat protection in real-world impact and storytelling. Supports the development of deployment and security configuration standards to ensure technologies are deployed in a secure fashion.

Orchestration

• Investigates, diagnoses, and triages security incidents with minimal guidance, deepening trust through proactive customer connection and crisis and incident response. Contributes to postmortem and root cause analyses for security incidents. Collaborates with others to create repair items, tools, and/or systems to support incident management. Begins to leverage Incident Management System(s) to update stakeholders during and after incidents as directed.
• Follows established procedures to maintain integrity of tools, techniques, and information of security practices, building trust with and protecting customers. Contributes to the assessment of operational security (e.g., red teaming and penetration testing) measures. Assists in developing techniques to measure and improve operational security.
• Leads security reviews, including architectural and design reviews, and documents findings in analysis reports. Applies best practices in security architecture, design, and development across feature areas. Identifies security risks and potential impact and collaborates with others to mitigate risks, escalating when needed. Helps monitor and respond to security events, potential vulnerabilities, exposures, and policy compliance issues, escalating as needed.

Solution Generation

• Identifies security issues and proposes mitigation steps, escalating when needed. Supports the implementation of mitigation, response, and remediation activities for security issues with minimal guidance. Leverages established feedback channels to gather input from customers and partners on security needs as directed. Collaborates with others to translate feedback and suggests improvement to security practices and solutions. Utilizes established guidelines, models, and best practices to advocate for customer and partner security needs and deliver protection through security products (e.g., Microsoft Defender, Microsoft Sentinel) independently.
• Partners with others to solve complex problems in technical implementation and automation of solutions related to specific kinds of security issues (e.g., security posture, signature-based detection, malware, threat analysis, reverse engineering, attack disruption, anomaly detection). Works with others to identify and suggest improvements in solutions and methods.

Required/minimum qualifications

• Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 1+ year(s) experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
  • OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 2+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
  • OR equivalent experience.
• Global collaboration is integral to our work at Microsoft, and proficiency in English is essential for effective communication in this role.

Additional or preferred qualifications

• Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field
  • OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
  • OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 5+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
  • OR equivalent experience.
• Proficiency in Portuguese is highly desirable.

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.