Joshua Clarke

Senior Cyber Security Analyst @Microsoft

Cheltenham, GB

Security investigator and threat hunter focused on detecting and disrupting abuse of large scale cloud platforms.At Microsoft, I conduct investigations across Azure, Microsoft 365, corporate infrastructure, and gaming services, analysing complex security incidents and identifying sophisticated abuse patterns targeting Microsoft services and customers.I later joined Central Fraud and Abuse Risk (CFAR) where my work focuses on proactive detection of fraud, abuse, and malicious infrastructure operating on the Azure platform. This includes identifying emerging attacker techniques, investigating coordinated abuse campaigns, and collaborating with detection engineering teams to develop scalable approaches for identifying and preventing platform misuse.Alongside investigations and threat hunting, I design and build internal tooling to improve the speed and effectiveness of cloud forensics and security operations.Key projects include- Cloud Forensics Platform - Designed and built a system that automatically deploys pre-configured forensic investigation environments in-region, enabling investigators to rapidly analyse compromised infrastructure and collect evidence in cloud environments- Forensic Acquisition Tool - Developed tooling to streamline the collection and preservation of forensic artifacts from cloud resources during security investigations- Investigation Workflow Tooling - Built tools that improve analyst note taking and documentation across case management platforms, reducing friction and improving investigation quality

Coventry University

Ethical Hacking and Network Security BSc