Senior Security Engineer and Principal Security Engineer (Services)- Multiple Positions

Microsoft is seeking security engineers to help secure Windows products and services used by billions of customers worldwide. The role focuses on offensive security, security engineering, penetration testing, vulnerability research, and developing scalable mitigations in collaboration with Windows engineering teams.

Responsibilities:

• Lead and participate in security reviews to identify and mitigate risk in Microsoft services, including design review, code reviews, and penetration testing
• Build reusable agents and tools to expedite and improve the consistency and quality of security reviews
• Review deployments and code for security defects and architectural risk using agents and automated tools built by you and others
• Safely demonstrate the real-world impact of security flaws to aid in prioritization and fix validation
• Be the security contact for teams building new innovative products and services that will be deployed and used by billions
• Apply an adversary mindset to creatively bypass security controls
• Leverage a broad and current understanding of security to devise new protections
• Collaborate with engineering teams to improve security and articulate the value of security investments

Requirements:

• Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in security or related field
• OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 6+ years experience in security or related field
• OR equivalent experience
• Ability to meet Microsoft, customer and/or government security screening requirements are required for this role
• 2+ years identifying vulnerabilities in online services, deployment misconfigurations
• 5+ years of experience in software engineering or security-related engineering
• Public track record of relevant security research, especially around vulnerability discovery