1 day ago
Remote, CanadaStaff+
Responsibilities
- Conduct vulnerability research and offensive security assessments across Windows using code auditing, fuzzing, penetration testing, and exploitation.
- Investigate complex vulnerabilities and novel attack vectors and develop durable defenses.
- Review product architecture, features, and native code for security vulnerabilities and architectural risks.
- Develop proof-of-concept exploits and scalable mitigations for vulnerabilities and broader classes of security issues.
- Build reusable security tools and automation to improve security reviews and vulnerability discovery.
- Partner with Windows product engineering teams to incorporate security into product design and resolve security issues.
- Engage with internal and external security communities on emerging vulnerabilities and attack techniques.
Requirements
- Bachelor's degree in Statistics, Mathematics, Computer Science, or a related field and 4+ years of security or related experience, or a master's degree in one of these fields and 3+ years of experience, or equivalent experience.
- Hands-on experience with offensive security techniques including penetration testing, vulnerability research, exploit development, or bypassing operating-system security mitigations.
- Experience identifying vulnerabilities in operating systems and/or native C/C++ applications.
- Preferred: master's degree and 6+ years of security experience, or bachelor's degree and 8+ years of security experience, or equivalent experience.
- Preferred: 5+ years of software engineering, security engineering, or related technical experience.
- Preferred: demonstrated security research experience, particularly vulnerability discovery.
- Preferred: experience exploiting vulnerabilities and bypassing operating-system security mitigations.
- Preferred: familiarity with Microsoft Windows architecture and operating-system internals.
Benefits
- Base pay range is CAD $142,400–$257,500 per year in Canada.
- Equal employment opportunity employer with reasonable accommodation support during the application process.
- Applications are accepted on an ongoing basis until the position is filled, with the posting open for at least five days.
About Microsoft
Microsoft develops operating systems, productivity software, cloud services, developer tools, and consumer devices for individuals, enterprises, and governments. Its main products include Windows, Microsoft 365, Azure, Visual Studio/GitHub, Xbox, and LinkedIn; revenue comes from software subscriptions and licenses, cloud consumption, hardware sales, and advertising. Founded in 1975 and headquartered in Redmond, Washington, Microsoft is a public company traded on Nasdaq.