Principal Security Engineer

Microsoft is a company where passionate innovators come to collaborate, envision what can be and take their careers to levels they cannot achieve anywhere else. This is a world of more possibilities, more innovation, more openness, and the sky is the limit thinking a cloud-enabled world.

Microsoft's Intelligence Platform engineering team is leading the transformation of analytics in the world of data with products like Power BI, Synapse Analytics, Azure Data Factory, Azure Data Explorer.We will bring the world's data tothe MicrosoftCloud, power a new class of data first applications, and empower everyone on the planet to make better decisions with data.

We do not just value differences or different perspectives. We seek them out and invite them in so we can tap into the collective power of everyone in the company. As a result, our ideas are better, our products are better, and our customers are better served.

Do you have a passion for offensive security work and excitement about protecting millions of users in one of Microsoft's fastest growing SaaS services? Do you enjoy discovering complex security issues in cloud services, and providing insights into how to fix the issues at scale? As part of the Intelligence Platform security team you will perform offensive security engagements, vulnerability analysis, develop solutions to remediate selected vulnerabilities, and provide consultation to teams to help them build cloud solutions securely.

Responsibilities:

We are looking for passionate people with experiences working with all service aspects of high throughput and multi-tenant services, with the proven ability to perform complex offensive security campaigns against cloud services.

Responsibilities include:

• Use subject matter expertise to identify potential security issues, tools, mitigations, and processes.
• Lead offensive security engagements against our suite of products, including penetration tests and variant hunting.
• Perform security code reviews and identify common vulnerabilities and provide guidance on security best practices.
• Demonstrate leadership by mentoring engineers, setting technical direction and priorities for the team.
• Execute and perform feature level threat models and technical security assessments for Intelligence Platform Services.

Qualifications:

Required Qualifications

• 7+ years experience in identifying security vulnerabilities, software development lifecycle, large-scale computing, modeling, cyber security, and anomaly detection.
• 5+ years of experience with the development lifecycle from implementation to production release.
• Experience performing penetration tests against large-scale cloud applications.
• Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check:
  • This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Preferred Qualifications

• Experience working with common security protocols, encryption, server technologies, modern authentication, and cloud app authorization architectures.
• Experience driving offensive security campaigns for large-scale cloud applications.
• Familiarity with the Security Development Lifecycle (SDL) and influencing engineering decisions based on security requirements.
• Experience performing penetration tests against large-scale cloud applications.
• BS or MS in Computer Science, Software Engineering, Information Security, or equivalent work experience.

Penetration Testing IC5 - The typical base pay range for this role across the U.S. is USD $133,600 - $256,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $173,200 - $282,200 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the Accommodation request form.

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.

#azdat

#security

#redteam