Security Research Analyst

Security Research Analyst | Microsoft Careers Skip to main content Microsoft Careers Careers Careers Search Search jobs Sign in Single PositionView All JobsSecurity Research AnalystCzech Republic, Prague, PragueApply nowAdd to cartFind out how well you match with this jobUpload your resumeJob descriptionCompany and benefitsJob number200042475Date postedJul 07, 2026Work site3 days / week in-officeTravelLess than 25%ProfessionSecurity EngineeringDisciplineSecurity ResearchRole typeIndividual ContributorEmployment typeFull-TimeOverviewSecurity represents one of the most critical priorities for customers in a world of digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place by reshaping security and empowering every user, customer, and developer with an end-to-end security cloud. Defender Experts for XDR is looking to hire a Security Analyst in Prague, Czech Republic. This role uses Microsoft Defender telemetry, deep knowledge of the attacker landscape, customer-facing investigation expertise, and AI-enabled workflows to help enterprises detect, investigate, and respond to advanced attacks and data breaches. The team performs root-cause analysis, generates custom alerts, identifies human adversary behaviors, builds tools and automations, and drives innovations for detecting advanced attacker tradecraft. This role participates in a global security operations model and may require weekend, holiday, or non-standard business-hour work where legally allowed and aligned to local labor regulations.ResponsibilitiesHunt directly in customer environments with proactive and reactive guidance. Explore and correlate large data sets to uncover novel attack techniques, monitor and catalog changes in activity group tradecraft, and investigate alerts for enterprise customers. Work directly with customers at all levels of their security organization from analyst to CISO to support investigation and response. Collaborate with data science and threat research teams to develop and maintain accurate and durable detections. Leverage AI-powered security tools, copilot, and agentic workflows to accelerate threat investigations, enrich customer findings, improve analytical efficiency, and drive better security outcomes. Design, build, test, and operationalize automations and AI agents that assist with threat hunting, case enrichment, security research, detection validation, and customer-ready investigative outputs. Partner with engineering, research, and operations teams to identify opportunities where AI agents and automation can improve the scale, consistency, and effectiveness of Defender Experts service delivery. Participate in a global security operations model, including potential weekend, holiday, or non-standard business-hour coverage where legally allowed and aligned to local requirements. QualificationsExperience in software development lifecycle, large-scale computing, modeling, cybersecurity, and/or anomaly detection; OR Master’s Degree in Statistics, Mathematics, Computer Science, or related field. Experience in a technical role in Security Operations, Threat Intelligence, Cyber Incident Response, or Penetration Testing/Red Team. Working with extremely large data sets using tools and scripting languages such as Excel, KQL, Python, Splunk, and Power BI. Other Requirements / Preferred Experience Ability to meet Microsoft, customer, and/or government security screening requirements, including the Microsoft Cloud Background Check upon hire/transfer and every two years thereafter. Ability to work from the Prague office at least three (3) days per week. Ability to support weekend, holiday, and non-standard business-hour coverage where legally allowed and aligned to local labor regulations. Experience leveraging generative AI, large language models, copilots, autonomous agents, or...