Alex Carr

Alex Carr is a Principal Security Researcher with Microsoft’s Detection and Response Team (DART), where he supports enterprise organisations in responding to complex cyber security incidents and systemic compromise. 

Since joining Microsoft in January 2019, Alex has worked across compromise recovery, incident response and security research disciplines, contributing to customer engagements involving enterprise breach containment, privilege escalation and long‑term attacker persistence within cloud and hybrid identity environments. His work focuses on helping organisations recognise and address systemic misconfigurations that enable modern attackers to persist, move laterally, and escalate privileges using built‑in services rather than custom malware.

Alex’s path into cyber security began in the Victorian public service in 2014, following a team reshuffle that left him responsible for Active Directory more by circumstance than intent. That experience sparked a lasting interest in identity security, evolving from on‑premises Active Directory to its cloud successor, Microsoft Entra ID.