Security Engineer II

Microsoft is seeking a Security Engineer II to help secure Windows products and devices through offensive security research, security engineering, and mitigation development. The role focuses on discovering vulnerabilities, conducting security reviews and penetration testing, building reusable security tools, and collaborating with Windows product teams to develop scalable defenses.

Responsibilities:

• Build reusable agents and tools to expedite and improve the consistency and quality of security reviews
• Review features and code for security defects and architectural risk using agents and automated tools built by you and others
• Be the security contact for teams building new innovative products and technologies in the next version of Windows and devices
• Identify security vulnerabilities in a wide variety of key OS features such as network protocols, security features, and Microsoft devices Leverage a broad and current understanding of security to devise new protections
• Interact with the external security community and security researchers
• Collaborate with product teams to improve security, and articulate the business value of security investments

Requirements:

• Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 1+ year(s) experience in security or related field
• OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 2+ years experience in security or related field
• OR equivalent experience
• Ability to meet Microsoft, customer and/or government security screening requirements are required for this role
• Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter
• 2+ years identifying vulnerabilities in operating systems and/or native (C/C++) applications
• 5+ years of experience in a software engineering or security-related engineering
• Public track record of relevant security research, especially around vulnerability discovery
• Experience exploiting bugs and bypassing security mitigations in operating systems
• Familiarity with Microsoft Windows architecture