Microsoft
Cybersecurity Lead Investigator - Weekend shift
$120K–$261K
United States · On-site · Full-time · Posted Oct 28, 2026
- Experience
- Required: 3+ years with a master’s degree, or 4+ years with a bachelor’s degree; doctorate route has no minimum years stated. Preferred: 3+ years with a doctorate, 6+ years with a master’s degree, or 8+ years with a bachelor’s degree.
- Education
- Doctorate, master's degree, or bachelor's degree in Statistics, Mathematics, Computer Science, Computer Security, or a related field; or equivalent experience.
About the job
Leads customer-facing cybersecurity incident investigations, directs technical response, and communicates evidence-based findings and recommendations.
What you'll do
- Set investigation objectives and priorities, lead evidence analysis, and coordinate specialist workstreams across on-premises and cloud environments.
- Assess adversary activity, compromise scope, and potential exfiltration; guide response planning while balancing recovery, evidence preservation, and business needs.
- Serve as the primary technical customer contact, brief stakeholders, and maintain investigation documentation and handovers.
What they ask for
- Doctorate in a related field; or a master’s degree in a related field and 3+ years of relevant experience; or a bachelor’s degree in a related field and 4+ years of relevant experience; or equivalent experience.
- Relevant fields include Statistics, Mathematics, Computer Science, and Computer Security; relevant experience includes software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
- Ability to meet Microsoft, customer, and/or government security screening requirements, including the Microsoft Cloud Background Check and any additional checks required for customer or government work.
- Ability to work the stated Friday-through-Monday, 10-hour shift scheduled between 8:00AM and 6PM EDT, including weekends and public holidays.
Nice to have
- Hands-on leadership of large-scale, high-pressure cybersecurity incident response across on-premises and cloud environments.
- Experience with nation-state or cybercrime activity, executive briefings, globally distributed incident response, technical mentoring, or relevant security certifications.
Pay
USD $119,800 - $234,700 per year (base salary); USD $160,200 - $261,000 per year (base salary)
Model-written summary · the original posting is authoritative