Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity.

Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end to end, simplified solutions.

The Microsoft Security organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate.

Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world .

The Microsoft Threat Intelligence Center (MSTIC) is a cyber threat actor focused intelligence team that discovers, tracks, and disrupts threats to protect Microsoft and its customers and partners.

MSTIC’s vision is to create a safer world through the creation and dissemination of accurate, timely, and actionable cyber threat actor intelligence.

MSTIC is recruiting a ‘Threat Intelligence Librarian’ with skills in information organization and design, and intelligence analysis. We are seeking a candidate able to help us build out our analytical model and inform and enforce the processes that support its use across MSTIC.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities

• Work with analysts to understand the workflows and investigation techniques used by the team to identify process and information organization needs.

• Contribute to and help maintain the analytical model taxonomy that allows us to articulate analyst observations and assessments.

• Work with engineers/developers/data scientists to integrate with systems that solve analyst needs.

• Work with partner teams to identify areas of overlap and find collaborative solutions that reduce duplication of effort and create clarity.

Qualifications

• Experience with and an understanding of the intelligence analysis investigation cycle.

• Good understanding of cyber-attack terminology and preferably some experience in working cyber investigations.

• Excellent communication and interpersonal skills.

• Ability to work effectively in a fast-paced, global team environment.

• 3+ years work or academic experience in anomaly detection, cybersecurity, data analysis, data modeling, geopolitical analysis, information organization and design, journalism,software development lifecycle, taxonomy development, and/or threat actor tracking.

Additional or Preferred Qualifications

• Master’s Degree in Library and Information Science (MLS or MLIS), Archives and Records Administration (MARA), or related field

#MSFTSecurity #MSTIC #MSecR

Microsoft is an equal opportunity employer. Consistent with applicable law, all qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations (https://careers.microsoft.com/v2/global/en/accessibility.html) .