Threat Context Analyst (Russia)

The Digital Security Unit is looking for a cybersecurity intelligence analyst, with Russian language skills and knowledge of current political affairs in Russia. DSU is a part of Microsoft’s Corporate, External, and Legal Affairs organization, in the Customer Security & Trust group, and leads much of Microsoft’s work to ensure that our customers are protected from the actions of advanced and persistent adversaries. Nation state cybersecurity threats are occurring with greater frequency, and at times, greater complexity. Understanding the threats and risks, and the geopolitical consequences, is an essential part of our approach to protecting our customers, the computing ecosystem, and Microsoft itself.

Role:
In this role, the analyst will work closely with the Microsoft Threat Intelligence Center (MSTIC) in the analysis of and reporting on activities related to threat actors in the Russian-language sphere. This analyst will bring significant understanding of the operational tactics of Russian actors and the geopolitical issues shaping cyber operations to produce reports and analysis for use internally and externally. This analyst will partner closely with MSTIC experts on cyber threats in the Russian area of influence, and create world-class analysis that helps shape our response, protections, and understanding of threats and risks to our customers and to Microsoft. The reports and information created by this role will be used and shared internally and externally with executives, customers, and others in the security community.

Responsibilities

Key Responsibilities:
Research, assess, and report on Russian geopolitical priorities and perspectives, Russia-based cyber threat actors, capabilities, and targeting.

Identify current and emerging cyber threats and trends on a variety of cyber security topics by researching and analyzing data/intelligence from cross company sources.

Research, analyze, and compose reports, including threat estimates, related to Russian geopolitical, cyber security, and transnational developments and their corresponding impacts on key constituencies.

Conduct and report analysis and scenario forecasting at both the tactical and strategic level.

Collaborate with all security teams cross company providing regional expertise and analysis on projects and reports related to cybersecurity.

Qualifications

Required Qualifications:
5+ years of experience working in cyber threat analysis

4+ years producing actionable threat intelligence or strategic analysis through written reports and products

Competency in the Russian language

At least 3 years of experience tracking Russian cyber capabilities, infrastructure, and operational techniques and political/geopolitical issues in the Russian sphere of influence.

US Citizenship

Preferred Experience:
Strong writing skills, including experience in taking complex technical concepts and making them consumable and relatable to broader groups of readers via written products and oral briefings.

Excellent cross-group collaborator with extensive experience building relationships and collaborating with front-line actor analysts, technical collectors, and peers across work units.

Proven ability to build strategic relationships with key threat intelligence partners in government and industry.

Knowledge of Russian cybercriminal ecosystem useful.

Ability to quickly and efficiently sort through data to identify key issues or variables to consider in making important strategic decisions.

Strong organizational skills, with the ability to quickly understand and meet the needs of customer and peer teams.

Ability to effectively multi-task and prioritize in a fast-paced environment.

Domestic and international travel will be required; estimated to be less than 30%. This includes quarterly meetings at Microsoft’s Corporate Headquarters, in Redmond, WA. The role is based in our Reston, VA office.

Citizenship Verification: This position requires verification of US Citizenship to meet federal government security requirements.

#CELA

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the Accommodation request form.

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.