Opportunities · Research opportunity
Security Research Intern
Microsoft
Apply with Birdee.
- When
- Summer 2027
- Where
- IL
- Apply by
- Apr 2, 2027
What you'll do
- Working alongside security researchers, architects, and engineering teams, you will review products during development, identify gaps in security visibility, and help ensure security monitoring capabilities are built in before products reach customers.
- Investigate real-world nation state attacks to support the development of high-fidelity protection logic across complex cross-domain kill-chains.
- Contribute to the implementation and coding of automated capabilities that autonomously investigate nation state threats, using AI assisted tooling and agentic flows.
- Assist in the refinement of protection coverage by analyzing real-world attack telemetry to improve the accuracy and performance of existing detection logics.
- Contribute to a strategic feedback loop by documenting findings from attack data analysis to improve overall protection logic and system-wide security posture.
- Partner with engineering and product teams to translate research insights into production-ready code, helping to validate protection concepts and ship them at a global scale.
What they want
- Required Currently pursuing a B.
- Solid understanding of computer science fundamentals, including operating systems, networking, software engineering, and distributed systems concepts.
- Strong analytical and problem-solving skills, with the ability to investigate complex technical systems and identify root causes.
- Familiarity with cloud platforms, Kubernetes, containers, or modern distributed systems architectures.
- Understanding of operating system and networking fundamentals, including Windows or Linux internals, authentication, protocols, and security controls.
Full posting
Working alongside security researchers, architects, and engineering teams, you will review products during development, identify gaps in security visibility, and help ensure security monitoring capabilities are built in before products reach customers.This hands-on internship offers significant ownership, mentorship from senior researchers, and exposure to technologies that are not yet publicly available. Investigate real-world nation state attacks to support the development of high-fidelity protection logic across complex cross-domain kill-chains. Apply security expertise to analyze massive telemetry sets using big-data query languages (KQL), reasoning over data to identify novel malicious patterns and engineer evidence-based detection rules. Contribute to the implementation and coding of automated capabilities that autonomously investigate nation state threats, using AI assisted tooling and agentic flows. Assist in the refinement of protection coverage by analyzing real-world attack telemetry to improve the accuracy and performance of existing detection logics. Contribute to a strategic feedback loop by documenting findings from attack data analysis to improve overall protection logic and system-wide security posture. Partner with engineering and product teams to translate research insights into production-ready code, helping to validate protection concepts and ship them at a global scale. Required Currently pursuing a B.Sc., M.Sc., or Ph.D. in Computer Science, Computer Engineering, Cybersecurity, or a related technical field, with at least one year remaining before graduation. Solid understanding of computer science fundamentals, including operating systems, networking, software engineering, and distributed systems concepts. Experience developing software or automation in one or more modern programming languages (e.g., Python, C#, Go, Java, or C/C++). Strong analytical and problem-solving skills, with the ability to investigate complex technical systems and identify root causes. Self-motivated learner who can work independently while collaborating effectively with researchers, security engineers, and product teams. Interest in cloud security, threat hunting, detection engineering, incident response, or Blue Team security research. Experience analyzing large datasets, logs, telemetry, or security events to identify anomalies and security-relevant patterns. Familiarity with cloud platforms, Kubernetes, containers, or modern distributed systems architectures. Understanding of operating system and networking fundamentals, including Windows or Linux internals, authentication, protocols, and security controls. Experience building automation, security tooling, or using AI-assisted workflows to improve investigations, analysis, or security operations. Demonstrated passion for security through personal research projects, Capture-the-Flag (CTF) competitions, vulnerability research, open-source contributions, or related activities.
Dates for this one
Only the dates this listing publishes. Anything it leaves out is left out here too.
Posted
Oct 4, 2026
Applications close
Apr 2, 2027
174 days left
The employer's own record
Usually listed
Checking opening history…
Filed pay record
Checking public pay records…
Verified by UTern
Last read 1 hour ago · closing date published
More at Microsoft
Other roles this employer has live right now.