Service Delivery Expert, Microsoft Defender

Supports research and data gathering for security analysis and contributes insights under guidance. Understands operational requirements in developing security solutions and assists in process improvement identification. Identifies security issues and implements mitigation steps. Supports data structuring and ensures data quality compliance. Partners with others to solve complex security problems and assists in refining analysis techniques. Investigates security incidents and leads security reviews while applying best practices. Leverages industry knowledge to contribute to community activities and supports standard development.

Conducting Research Supports more experienced analysts in developing insights and identifying potential security vulnerabilities and threats. Begins to understand and account for operational requirements when supporting the development or implementation of security solutions. Assists in the identification of areas for process improvements within the security domain. Contributes to the discussion on prioritization methodologies and apply them under guidance to support the team's objectives. Compiles and organizes data from various sources, with guidance from more experienced team members to refine the understanding of threat landscapes. Utilizes existing tools and software to assist in optimizing data analysis processes. Supports research into security areas by gathering data and information on Microsoft, supported, and/or competitor products vulnerable to exploitation, tracking current or potential future attacks, and/or studying academic literature as directed. Assists in analyzing security threats and contributes to summarizing the findings under supervision. Collaborates with team to propose solutions that enhance security, including for integration in or addition to new/existing products or features. Leverages artificial intelligence (AI) workflows to understand research operations and how customers use Microsoft products. Aids in the creation of security analysis plans, ensuring they consider product timelines and feature scopes with guidance. Supports efforts to clean, structure, enrich, and standardize data and data sources to make them ready for further handling. Contributes to data quality efforts to maintain reliable access to data sources, ensuring adherence to proper protocols and privacy regulations during data preparation. Assists in the curation of data sources and works with partners to maintain data access within the team. Helps incorporate new data sources in line with corporate data privacy standards. Industry Leadership Leverages working knowledge to identify potential security issues, tools, mitigations, and processes (e.g., architecture, failure modes, attack chain, threat modeling, vulnerabilities) with minimal guidance. Researches and develops knowledge of industry trends, technologies, tools, securities, and advances. Participates in internal and external community through publications, white papers, seminars, or conferences, shaping understanding of threat protection in real-world impact and storytelling. Supports the development of deployment and security configuration standards to ensure technologies are deployed in a secure fashion. Orchestration Investigates, diagnoses, and triages security incidents with minimal guidance, deepening trust through proactive customer connection and crisis and incident response. Contributes to postmortem and root cause analyses for security incidents. Collaborates with others to create repair items, tools, and/or systems to support incident management. Begins to leverage Incident Management System(s) to update stakeholders during and after incidents as directed. Follows established procedures to maintain integrity of tools, techniques, and information of security practices, building trust with and protecting customers. Contributes to the assessment of operational security (e.g., red teaming and penetration testing)