We are seeking an experienced Principal Investigator to lead and support complex corporate internal investigations and help advance Business and Regulatory Investigations (BRI) team’s investigative capabilities. In this role you will demonstrate strong investigative judgement, planning, interviewing, credibility assessment, fact-finding, and evidence analysis capabilities, together with experience leveraging electronic evidence and technical data sources to support complex investigations. This role will work closely with attorneys and partners across Human Resources, Security, Finance, or other organizations globally.
Responsibilities
- Conduct complex and sensitive corporate internal investigations under the direction of counsel, involving allegations of employee misconduct, including financial misconduct fraud, conflicts of interest, misuse or unauthorized disclosure of company information, security-related misconduct, other potential policy violations.
- Develop and execute investigative strategies, including identifying and collecting relevant evidence, conduct complex and sensitive interviews, perform document review and evidence analysis, and conduct or support digital forensic examinations.
- Identify, search, collect, review, and analyze electronic evidence using Microsoft Purview eDiscovery, Relativity, or equivalent enterprise investigative, forensic and document review platforms, ensuring investigative activities are appropriately targeted and proportionate.
- Analyze documents, interviews, and technical evidence. Identify relevant facts, inconsistencies, and evidentiary gaps. Develop clear, objective fact summaries to support counsel’s investigative decisions and findings.
- Collaborate effectively with attorneys and cross-functional partners, including Security, Human Resources, and other stakeholders to obtain and evaluate information relevant to investigations.
- Develop investigative playbooks, standards, and scalable practices that improve the quality, consistency, and efficiency of BRI investigations.
Qualifications
- Master's Degree in Business, Accounting, Criminal Justice, Law, International Relations, Global Intelligence, Engineering or related field AND 4+ years experience conducting employee misconduct investigations or other complex corporate internal investigations involving multiple evidence sources and significant organizational risk, or related field
- OR Bachelor's Degree in Business, Accounting, Criminal Justice, Law, International Relations, Global Intelligence, Engineering or related field AND 6+ years experience conducting employee misconduct investigations or other complex corporate internal investigations involving multiple evidence sources and significant organizational risk, or related field
- OR equivalent experience.
- OR Bachelor's Degree in Business, Accounting, Criminal Justice, Law, International Relations, Global Intelligence, Engineering or related field AND 6+ years experience conducting employee misconduct investigations or other complex corporate internal investigations involving multiple evidence sources and significant organizational risk, or related field
- Advanced experience using eDiscovery and electronic document review platforms, preferably Microsoft Purview eDiscovery and Relativity, or comparable enterprise platforms, to search, collect, and analyze large volumes of electronic evidence.
- Understanding of electronic evidence, including electronic communications, documents, metadata, audit records, and other enterprise data sources.
- Interviewing, analytical, and critical-thinking skills, including the ability to distinguish established facts from assumptions, identify evidentiary gaps, and develop appropriate investigative follow-up.
- Demonstrated ability to manage multiple priorities, work independently, collaborate across geographically dispersed teams, and appropriately handle highly confidential information.
- Experience conducting or supporting investigations across diverse geographies and jurisdictions.
- Ability to write and interpret data query languages such as Kusto Query Language (KQL), SQL, or similar query languages to independently identify, collect, analyze, and validate relevant evidence.
- Experience using Microsoft Defender, including Defender Advanced Hunting, or comparable security and endpoint investigation platforms.
- Experience analyzing security and audit telemetry, including authentication, device, file, cloud application, and data movement activity.
- Experience conducting or supporting digital forensic examinations, including analysis of endpoint, browser, file system, removable media, or other forensic artifacts.
- Familiarity with scripting, automation, data analytics, or AI-assisted investigative and document review capabilities is a plus.
Investigations IC5 - The typical base pay range for this role across the U.S. is USD $116,900 - $203,600 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $148,400 - $222,600 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.
Skills Required
- Master's degree in Business, Accounting, Criminal Justice, Law, International Relations, Global Intelligence, Engineering, or a related field plus 4 or more years conducting employee misconduct or complex corporate internal investigations
- Bachelor's degree in Business, Accounting, Criminal Justice, Law, International Relations, Global Intelligence, Engineering, or a related field plus 6 or more years conducting employee misconduct or complex corporate internal investigations
- Equivalent experience may substitute for the stated education and experience combinations
- Advanced experience using eDiscovery and electronic document review platforms, preferably Microsoft Purview eDiscovery and Relativity
- Understanding of electronic evidence, including communications, documents, metadata, audit records, and enterprise data sources
- Strong interviewing, analytical, critical-thinking, and investigative follow-up skills
- Ability to manage multiple priorities, work independently, collaborate across geographically dispersed teams, and handle highly confidential information
- Experience conducting or supporting investigations across diverse geographies and jurisdictions
- Ability to write and interpret KQL, SQL, or similar query languages
- Experience using Microsoft Defender, Defender Advanced Hunting, or comparable security and endpoint investigation platforms
- Experience analyzing security and audit telemetry, including authentication, device, file, cloud application, and data movement activity
- Experience conducting or supporting digital forensic examinations involving endpoint, browser, file system, removable media, or other forensic artifacts
- Familiarity with scripting, automation, data analytics, or AI-assisted investigative and document review capabilities
Microsoft Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Microsoft and has not been reviewed or approved by Microsoft.
-
Fair & Transparent Compensation — Pay is presented as broadly competitive overall, with clear role/level/location variation and an emphasis on using posted ranges and band information for apples-to-apples comparisons.
-
Retirement Support — Retirement benefits are described as a standout, highlighted by a strong 401(k) match structure and immediate vesting, plus additional plan features for tax-advantaged saving.
-
Parental & Family Support — Family-oriented benefits are portrayed as a meaningful strength, with substantial paid parental leave and added supports like back-up care and adoption/surrogacy assistance.
Microsoft Insights
What We Do
At Microsoft, our mission is to empower every person and every organization on the planet to achieve more. Our mission is grounded in both the world in which we live and the future we strive to create. Today, we live in a mobile-first, cloud-first world, and the transformation we are driving across our businesses is designed to enable Microsoft and our customers to thrive in this world.
