5 days ago
Base Salary
$120k - $261k/yr
Responsibilities
- Research critical security areas, vulnerabilities, attack techniques, adversaries, and relevant academic literature.
- Lead large-scale architectural and design security reviews and produce analysis reports.
- Perform vulnerability research, exploitability analysis, root-cause and variant analysis, fuzzing, crash triage, and security automation.
- Develop solutions involving threat analysis, reverse engineering, malware, detection, anomaly detection, and attack disruption.
- Partner with engineering, architecture, and product teams to improve secure-by-default design, defense in depth, and security controls.
- Monitor and respond to security events, vulnerabilities, exposures, and policy compliance issues.
- Use AI workflows to improve security research operations and identify product protection opportunities.
Requirements
- Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or a related field; or a master's degree in one of these fields plus 3+ years of relevant experience; or a bachelor's degree plus 4+ years of relevant experience; or equivalent experience.
- Significant experience in vulnerability research and exploit analysis.
- Experience with code auditing, secure architecture review, threat modeling, attack surface analysis, or browser, application, operating system, or cloud security.
- Experience with fuzzer development, crash triage, security automation, AI-assisted vulnerability research, or AI-assisted security research.
- Experience in software engineering and computer science.
- Experience with C/C++ and Rust is preferred.
Benefits
- Base pay is listed at USD $119,800-$234,700 per year nationally, with a separate USD $160,200-$261,000 annual range for specified San Francisco Bay Area and New York City metropolitan locations.
- Certain roles may be eligible for benefits and other compensation.
- Starting January 26, 2026, employees within the stated commuting distances of designated offices are expected to work from the office at least four days per week, subject to local law and jurisdiction.
- The position will remain open for a minimum of five days and accept applications on an ongoing basis until filled.
About Microsoft
Microsoft develops operating systems, productivity software, cloud services, developer tools, and consumer devices for individuals, enterprises, and governments. Its main products include Windows, Microsoft 365, Azure, Visual Studio/GitHub, Xbox, and LinkedIn; revenue comes from software subscriptions and licenses, cloud consumption, hardware sales, and advertising. Founded in 1975 and headquartered in Redmond, Washington, Microsoft is a public company traded on Nasdaq.