Job description

Overview Cybersecurity in an era of rapidly developing artificial intelligence is one of the defining technology challenges of our time. Microsoft is defending customers, governments, enterprise organizations, and the broader technology ecosystem against an evolving threat landscape. This role offers an opportunity to practice law where consequential cybersecurity and AI security issues become real-world operational decisions. As Corporate Counsel, Security Operations, you will serve as a trusted legal advisor to teams responsible for Microsoft’s global cybersecurity operations. You will provide practical, timely counsel on cybersecurity and AI security incidents; the receipt, use, and sharing of cybersecurity threat information; vulnerability management; security patch and partner programs; and other cutting-edge security operations activities. You will work with security professionals confronting novel threats and help them navigate legal, regulatory, contractual, privacy, and operational considerations so Microsoft can act quickly and responsibly. This opportunity will allow you to develop deep expertise at the intersection of law, cybersecurity, AI, and global security operations; build relationships with leading security professionals; and help shape legal approaches to security challenges for which established playbooks may not yet exist. Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees, we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day, we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. Responsibilities • Advise Microsoft’s security operations teams on cybersecurity and AI security incidents, including legal issues arising during investigation, containment, remediation, information sharing, customer and government engagement, and post-incident activities. Provide clear, practical advice in situations that may be fast-moving, technically complex, sensitive, and globally significant. • Provide legal support for the intake, analysis, use, and sharing of cybersecurity threat information, including information received from governments, researchers, customers, partners, and members of the security community. Advise clients on applicable legal, contractual, privacy, confidentiality, and data-use considerations. • Support Microsoft’s vulnerability management and security ecosystem programs, including coordinated vulnerability disclosure, vulnerability handling and remediation programs, and work with security partners to enable the timely development and deployment of security protections and patches. • Counsel on emerging security and AI security operations. Partner with technical and operational teams to develop new approaches to cybersecurity, including activities involving AI-enabled security capabilities, AI-related security incidents, threat detection and analysis, and novel security technologies and processes. • Draft, review, and negotiate security-related agreements and arrangements with partners and other third parties. Develop scalable contractual approaches that enable security collaboration while addressing risk, confidentiality, data use, intellectual property, liability, and other legal considerations. • Identify and manage legal risk while enabling security teams to move quickly. Translate complex legal and regulatory requirements into actionable guidance, assess novel issues where precedent may be limited, and develop practical solutions that balance legal risk, business objectives, customer trust, and Microsoft’s security mission. • Collaborate across Microsoft’s global security ecosystem. Develop strong partnerships with attorneys, engineers, incident responders, threat intelligence professionals, security researchers, privacy and regulatory specialists, communications teams, and other stakeholders to improve legal processes, frameworks, and support at the speed and scale required of a global security organization. Qualifications Required Qualifications • Juris Doctor Degree or international equivalent degree AND 1+ year(s) experience as a practicing attorney • OR equivalent experience. • Active license to practice law in a jurisdiction and capable of meeting admission requirements in relevant jurisdiction. Preferred Qualifications • Experience practicing law in government, at a law firm, or in another private sector organization. • Experience with or familiarity with cybersecurity law, cybersecurity operations, technology law, or legal issues involving security incidents, vulnerabilities, threat intelligence, or related security activities. • Ability to independently advise operational clients on complex security, technology, regulatory, contractual, and data-related matters with minimal oversight, including in circumstances involving ambiguity, incomplete information, and competing risks. • Experience drafting and negotiating contracts • Experience in assessing legal and operational risk, and developing practical solutions that help clients achieve their objectives while managing legal exposure. • Experience advising on cybersecurity incidents, vulnerability disclosure or remediation, threat intelligence, information sharing, privacy and data use, government cybersecurity engagement, or AI security. • Judgment and curiosity, with the ability to quickly understand complex technical and operational issues; and the ability to build trusted relationships across legal, engineering, security, policy, and business teams. Legal Counsel IC3 - The typical base pay range for this role across the U.S. is USD $105,800 - $204,000 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $138,400 - $223,300 per year. Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: careers.microsoft.com This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Requirements

Must-haves

Juris Doctor Degree or international equivalent degree AND 1+ year(s) experience as a practicing attorney • OR equivalent experience.
Active license to practice law in a jurisdiction and capable of meeting admission requirements in relevant jurisdiction.
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Nice-to-haves

Experience practicing law in government, at a law firm, or in another private sector organization.
Experience with or familiarity with cybersecurity law, cybersecurity operations, technology law, or legal issues involving security incidents, vulnerabilities, threat intelligence, or related security activities.
Experience drafting and negotiating contracts
Experience in assessing legal and operational risk, and developing practical solutions that help clients achieve their objectives while managing legal exposure.
Experience advising on cybersecurity incidents, vulnerability disclosure or remediation, threat intelligence, information sharing, privacy and data use, government cybersecurity engagement, or AI security.
Judgment and curiosity, with the ability to quickly understand complex technical and operational issues; and the ability to build trusted relationships across legal, engineering, security, policy, and business teams.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: eightfold
Effort: medium