Principal Investigator

Job ID: Posted: Location: United States, Washington, RedmondSalary: USD $116,900 - $203,600 per yearEmployment type: Full-TimeWork site: 4 days / week in-officeRole type: Individual ContributorTravel: Less than 25%Profession: Governance, Risk, & ComplianceDiscipline: InvestigationsCompany: MicrosoftOverviewWe are seeking an experienced Principal Investigator to lead and support complex corporate internal investigations and help advance Business and Regulatory Investigations (BRI) team’s investigative capabilities. In this role you will demonstrate strong investigative judgement, planning, interviewing, credibility assessment, fact-finding, and evidence analysis capabilities, together with experience leveraging electronic evidence and technical data sources to support complex investigations. This role will work closely with attorneys and partners across Human Resources, Security, Finance, or other organizations globally.ResponsibilitiesConduct complex and sensitive corporate internal investigations under the direction of counsel, involving allegations of employee misconduct, including financial misconduct fraud, conflicts of interest, misuse or unauthorized disclosure of company information, security-related misconduct, other potential policy violations.Develop and execute investigative strategies, including identifying and collecting relevant evidence, conduct complex and sensitive interviews, perform document review and evidence analysis, and conduct or supportdigital forensic examinations.Identify, search, collect, review, and analyze electronic evidence using Microsoft Purview eDiscovery, Relativity, or equivalent enterprise investigative, forensic and document review platforms, ensuring investigative activities are appropriately targeted and proportionate.Analyze documents, interviews, and technical evidence. Identify relevant facts, inconsistencies, and evidentiary gaps. Develop clear, objective fact summaries to support counsel’s investigative decisions and findings.Collaborate effectively with attorneys and cross-functional partners, including Security, Human Resources, and other stakeholders to obtain and evaluate information relevant to investigations.Develop investigative playbooks, standards, and scalable practices that improve the quality, consistency, and efficiency of BRI investigations.QualificationsRequired/minimum qualificationsMaster's Degree in Business, Accounting, Criminal Justice, Law, International Relations, Global Intelligence, Engineering or related field AND 4+ years experience conducting employee misconduct investigations or other complex corporate internal investigations involving multiple evidence sources and significant organizational risk, or related fieldOR Bachelor's Degree in Business, Accounting, Criminal Justice, Law, International Relations, Global Intelligence, Engineering or related field AND 6+ years experience conducting employee misconduct investigations or other complex corporate internal investigations involving multiple evidence sources and significant organizational risk, or related fieldOR equivalent experience.Additional or preferred qualificationsAdvanced experience using eDiscovery and electronic document review platforms, preferably Microsoft Purview eDiscovery and Relativity, or comparable enterprise platforms, to search, collect, and analyze large volumes of electronic evidence.Understanding of electronic evidence, including electronic communications, documents, metadata, audit records, and other enterprise data sources.Interviewing, analytical, and critical-thinking skills, including the ability to distinguish established facts from assumptions, identify evidentiary gaps, and develop appropriate investigative follow-up.Demonstrated ability to manage multiple priorities, work independently, collaborate across geographically dispersed teams, and appropriately handle highly confidential information.Experience conducting or supporting investigations across diverse geographies and jurisdictions.Ability to write and interpret data query languages such as Kusto Query Language (KQL), SQL, or similar query languages to independently identify, collect, analyze, and validate relevant evidence.Experience using Microsoft Defender, including Defender Advanced Hunting, or comparable security and endpoint investigation platforms.Experience analyzing security and audit telemetry, including authentication, device, file, cloud application, and data movement activity.Experience conducting or supporting digital forensic examinations, including analysis of endpoint, browser, file system, removable media, or other forensic artifacts.Familiarity with scripting, automation, data analytics, or AI-assisted investigative and document review capabilities is a plus.Investigations IC5 - The typical base pay range for this role across the U.S. is USD $116,900 - $203,600 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $148,400 - $222,600 per year. Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.