Security Engineer II (Services)

Microsoft is seeking a security engineer to help secure Windows products and services used by customers and businesses worldwide. The role focuses on offensive security, security engineering, penetration testing, vulnerability research, and developing scalable mitigations in collaboration with Windows product engineering teams.

Responsibilities:

• Build reusable agents and tools to expedite and improve the consistency and quality of security reviews
• Review deployments and code for security defects and architectural risk using agents and automated tools built by you and others
• Safely demonstrate the real-world impact of security flaws to aid in prioritization and fix validation
• Be the security contact for teams building new innovative products and services that will be deployed and used by billions
• Apply an adversary mindset to creatively bypass security controls
• Leverage a broad and current understanding of security to devise new protections
• Collaborate with engineering teams to improve security and articulate the value of security investments

Requirements:

• Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 1+ year(s) experience in security or related field
• OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 2+ years experience in security or related field
• OR equivalent experience
• 2+ years identifying vulnerabilities in online services, deployment misconfigurations
• 5+ years of experience in software engineering or security-related engineering
• Public track record of relevant security research, especially around vulnerability discovery