Senior Security Engineer and Principal Security Engineer (Services)- Multiple Positions

Microsoft is hiring Senior and Principal Security Engineers for its Windows Security team. The role focuses on securing Windows services through security reviews, penetration testing, vulnerability discovery, reusable security tools, and collaboration with product engineering teams to develop scalable defenses.

Responsibilities:

• Lead and participate in security reviews to identify and mitigate risk in Microsoft services, including design review, code reviews, and penetration testing
• Build reusable agents and tools to expedite and improve the consistency and quality of security reviews
• Review deployments and code for security defects and architectural risk using agents and automated tools built by you and others
• Safely demonstrate the real-world impact of security flaws to aid in prioritization and fix validation
• Be the security contact for teams building new innovative products and services that will be deployed and used by billions
• Apply an adversary mindset to creatively bypass security controls
• Leverage a broad and current understanding of security to devise new protections
• Collaborate with engineering teams to improve security and articulate the value of security investments

Requirements:

• Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in security or related field
• Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 6+ years experience in security or related field
• equivalent experience
• Ability to meet Microsoft, customer and/or government security screening requirements are required for this role
• 2+ years identifying vulnerabilities in online services, deployment misconfigurations
• 5+ years of experience in software engineering or security-related engineering
• Public track record of relevant security research, especially around vulnerability discovery