Role Purpose
Do you want to be at the forefront of protecting Microsoft’s key digital assets? Would it excite you to uncover clues and piece together the technical parts of a puzzle to solve complex cases? If so, then consider joining our Investigations & Forensics Team in Corporate Network Security.
Team/Department Mission
The Network Security Investigations & Forensics team is a core unit within Microsoft’s Trustworthy Computing organization and is responsible for investigating escalated internal and external threats to the company and the corporate network. We provide technical expertise and investigative services to a variety of groups including: Legal and Corporate Affairs, Human Resources, Physical Security Investigations, the Financial Integrity Unit, and many others. In addition, the group provides more traditional subject matter and design expertise in a number of areas related to network security technologies and information security policies. The successful candidate for this position will train in Redmond for 2-3 months, but will eventually be based in Reading, UK.
Key Accountabilities
Primary Responsibilities:
Conduct and manage multiple end-to-end global IT security investigations of moderate to high complexity, regarding breach of policy, violations of standards of business conduct, hacks, leaks, and other escalated information security cases.
Conduct technical and complex investigative interviews
Provide expert technical guidance to other Microsoft groups and senior management regarding the technical and forensic aspects of major incidents and sensitive cases. Provide feedback and recommendations for remediation and policy changes.
Research and refine industry best practices, resulting in process improvements in procedures and methodologies for the conduction of forensic review of Microsoft platforms, applications, and information technology infrastructures.
Perform forensic media acquisition and analysis.
Serve as a subject matter expert and help evaluate proposed security policies and designs.
Communicate complex technical or evidentiary information and findings with internal customers and law enforcement agencies, if necessary.
Manage and develop strong working relationships with key influential partners or contacts within the industry.
Be a thought leader in major areas relating to investigations, by providing thought leadership internally and externally, and evangelize the role of the investigations team internationally.
Manage and develop key long term relationships with senior managers to influence their decision making relating to policies, procedures, or guidelines.
Keep abreast of developments in the areas of privacy and legal issues internationally.
Key Success Criteria
Knowledge, Skills and Experience
1) Essential Experience
Must have detailed experience in the conducting of highly effective and complex investigative interviews
Proven computer forensic experience within a large multi-national organisation.
Proven investigative experience within a large multi-national organisation.
2) Technical/Functional Skills
Strong familiarity with applicable local region domestic and international laws and regulations pertaining to information asset protection.
Solid understanding of forensic methodologies, including in-depth knowledge of computer incident response processes, Microsoft file internals, as well as 'live' incident response techniques.
Extensive host forensic analysis skills including strong hardware knowledge and skills, particularly with media and data storage, forensic imaging, and detailed file system level analysis.
Detailed knowledge and experience of common forensic tools such as Encase, FTK, Winhex, etc.
3) Personal Attributes/Interpersonal Skills
Excellent written and verbal skills, including the ability to effectively communicate complex technical information to non-technical audiences.
Must be able to lead presentations to senior management.
Special Requirements/Additional Information
Travel: Regular travel required as needed, primarily within Europe. Must be able to obtain necessary work permits and travel visas where applicable.
Microsoft is an equal opportunity employer and supports workforce diversity
