Overview
Microsoft is a company where passionate innovators come to collaborate, envision what can be, and take their careers further. This is a world of more possibilities, more innovation, more openness, and the sky is the limit thinking in a cloud-enabled world.
The CoreAI organization at Microsoft builds the end-to-end AI stack and is core to Azure AI innovation and differentiation, as well as all of Microsoft’s flagship products, from GitHub, to Office, Teams, and Xbox. We are the team building Responsible AI, Azure OpenAI, Model as a Service, Azure ML, Cognitive Services, and the global Azure AI infrastructure for running the largest AI workloads on the planet. We do not just value differences or different perspectives, we seek them out and invite them in so we can tap into the collective power of everyone in the company. As a result, our customers are better served. Within CoreAI, the Foundry team empowers builders around the world of all skill levels to easily create AI apps.
CoreAI RAI Ops (Responsible AI Operations) is the operational arm of CoreAI that monitors AI misuse, investigates abuse signals, reviews high risk content, manages customer notifications and appeals, supports data labeling and quality programs, and helps ensure Microsoft AI systems are deployed safely and responsibly. The team combines human review, policy enforcement, incident response, analytics, and operational tooling to identify emerging AI risks, protect customers, improve model safeguards, and scale Responsible AI governance across Microsoft AI products.
We are looking for a Responsible Content Analyst 2, Cyber-focused work may include investigating malicious or deceptive uses of AI systems, including activity intended to compromise accounts, systems, data, or safety controls.
Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.
Responsibilities
-
Investigate emerging abuse patterns and safety risks across Microsoft AI products, with particular emphasis on cyber-based misuse.
-
Investigate potential malicious code generation, phishing, social engineering, credential abuse, malware-related activity, reconnaissance, exploitation workflows, and attempts to circumvent safety controls.
-
Review and adjudicate user prompts, model outputs, account activity, and other available evidence using Responsible AI policies, Cyber Safety guidance, abuse taxonomies, and structured decision frameworks.
-
Distinguish benign, dual-use, harmful, and policy-violating activity in complex or ambiguous scenarios.
-
Support abuse monitoring across text, image, audio, video, multimodal, and other emerging content types and risk categories.
-
Analyze safety, abuse, quality, and operational data to identify trends, test investigative hypotheses, scope potential impact, and support evidence-based enforcement or mitigation decisions.
-
Document emerging abuse behaviors, indicators, tactics, techniques, and patterns, including cyber-related adversarial activity involving generative AI.
-
Develop, refine, and validate moderation guidelines, Cyber Safety taxonomies, classifier definitions, reviewer instructions, escalation criteria, and evaluation datasets.
-
Translate investigative findings into recommendations for improved detections, classifiers, model safeguards, policies, enforcement strategies, operational processes, and product mitigations.
-
Produce high-quality annotations, calibrations, and policy-aligned judgments that support AI training, evaluation, and safety-system improvements.
-
Lead or contribute to complex escalations, customer appeals, high-risk submissions, incidents, and priority investigations involving potential AI misuse or policy violations.
-
Analyze operational metrics, quality signals, false-positive and false-negative patterns, and investigation outcomes to improve accuracy, consistency, efficiency, and customer experience.
-
Support the onboarding and operationalization of new risk categories, AI models, safeguards, policies, and abuse-monitoring capabilities.
-
Partner with engineering, data science, policy, threat intelligence, legal, security, customer-support, and Responsible AI teams to resolve cases and strengthen protections.
-
Communicate investigative findings, trends, risks, and mitigation recommendations through clear written analyses and stakeholder briefings.
-
Perform all work in accordance with Microsoft privacy, security, compliance, wellness, and Responsible AI requirements, including the safe handling of sensitive or potentially disturbing content.
Qualifications
Required Qualifications:
-
Bachelor's Degree in Communication, Media, Behavioral Psychology, Criminal Justice, Linguistics, Education, Business, Computer Science, or related field AND 3+ years relevant experience in work requiring privacy, discretion, and/or exposure to sensitive situations or content (e.g., digital safety, content review, the use and creation of content moderation tools, data annotation, paralegal, social work, law enforcement) OR High School Diploma (or local equivalent), AND 5+ years relevant experience in work requiring privacy, discretion, and/or exposure to sensitive situations or content (e.g., digital safety, content review, the use and creation of content moderation tools, data annotation, paralegal, social work, law enforcement) OR equivalent experience.
Other Requirements:
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:
- Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.
Preferred Qualifications
-
Experience conducting evidence-based investigations and making decisions using structured policies, investigative frameworks, operational procedures, or enforcement guidelines.
-
Working knowledge of cyber threats and adversary tradecraft, such as phishing, malware, credential abuse, reconnaissance, exploitation, persistence, evasion, exfiltration, indicators of compromise, and MITRE ATT&CK techniques.
-
Experience analyzing operational, investigative, or security data using query, scripting, visualization, or analytical tools such as SQL, Kusto Query Language, Python, Power BI, or comparable technologies.
-
Ability to distinguish benign, dual-use, and harmful activity while applying sound judgment in complex, sensitive, or ambiguous situations.
-
Understanding of generative AI and large language model capabilities, limitations, failure modes, and potential misuse across cyber and other Responsible AI risk areas.
-
Written and verbal communication skills, including the ability to document investigations and explain technical findings, risks, and recommendations to technical and non-technical audiences.
-
Ability to manage competing priorities, maintain attention to detail, and deliver consistent, high-quality work in a rapidly evolving operational environment.
-
Ability to handle sensitive or potentially disturbing content while following applicable privacy, security, compliance, wellness, and Responsible AI requirements.
-
Experience investigating cyber-based misuse, content abuse, platform abuse, fraud, policy violations, or attempts to circumvent product safety controls.
-
Experience in Responsible AI, trust and safety, content moderation, abuse prevention, security operations, threat intelligence, incident response, or customer-facing risk operations.
-
Familiarity with cyber threat frameworks, taxonomies, indicators of compromise, and threat-intelligence platforms or standards such as MITRE ATT&CK, STIX/TAXII, or MISP.
-
Experience reviewing or investigating text, image, audio, video, or multimodal content using structured policies, taxonomies, or evaluation frameworks.
-
Experience evaluating, red-teaming, or testing generative AI systems, classifiers, safety controls, or abuse-detection mechanisms.
-
Experience developing or improving operational guidelines, abuse taxonomies, reviewer instructions, escalation criteria, evaluation datasets, or quality-assurance processes.
-
Experience working with engineering, data science, policy, legal, compliance, security, threat intelligence, or customer-support teams on sensitive investigations or escalations.
-
Experience with Microsoft Azure, Power BI, Kusto Query Language, SQL, Python, incident-management systems, or comparable investigative and analytical tools.
Responsible Content IC3 - The typical base pay range for this role across the U.S. is USD $77,800 - $153,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $102,200 - $169,900 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process.
