Senior Security Researcher

What you'll do

• Research attacker techniques and threats targeting identities, SaaS applications, authentication, sessions, privileges, and data.
• Turn research and threat intelligence into attack scenarios, telemetry requirements, detection opportunities, and durable protections.
• Develop RAG and coding agents, plus evaluation frameworks, for security research, detection authoring, and threat investigation.

What they ask for

• Doctorate in a related field; or a related master's degree and 3+ years of relevant experience; or a related bachelor's degree and 4+ years of relevant experience; or equivalent experience.
• Meet Microsoft, customer and/or government security screening requirements, including the Microsoft Cloud Background Check.

Nice to have

• Experience with modern attacker kill chains, MITRE ATT&CK, and hybrid attacks involving third-party identity providers, SaaS applications, or cloud services.
• Threat hunting and data analysis; AI agents, RAG, evaluation and quality validation; Python or similar programming skills.

Pay

USD $119,800 - $234,700 per year (base salary); USD $160,200 - $261,000 per year (base salary)

Tools

Okta, Salesforce, RAG, KQL, MITRE ATT&CK, Python

AI focus

Build RAG-based and coding agents for security research, detection authoring, and threat investigation; create frameworks to evaluate agent accuracy, completeness, groundedness, robustness, and usefulness.