1 day ago
Remote, AustraliaStaff+
Responsibilities
- Build reusable agents and tools to improve the consistency and quality of security reviews.
- Review Windows features and code for security defects and architectural risks using automated tools.
- Serve as the security contact for teams developing new Windows products, technologies, and devices.
- Identify vulnerabilities in operating-system features, network protocols, security features, and Microsoft devices.
- Develop protections and collaborate with product teams to improve security and communicate the business value of security investments.
- Engage with the external security community and security researchers.
Requirements
- Master's degree in Statistics, Mathematics, Computer Science, or a related field plus 4+ years of security or related experience, or bachelor's degree in those fields plus 6+ years, or equivalent experience.
- At least 2 years identifying vulnerabilities in operating systems and/or native C/C++ applications.
- At least 5 years of software engineering or security-related engineering experience.
- Demonstrated security research experience, particularly vulnerability discovery.
- Experience exploiting bugs and bypassing security mitigations in operating systems.
- Familiarity with Microsoft Windows architecture.
About Microsoft
Microsoft develops operating systems, productivity software, cloud services, developer tools, and consumer devices for individuals, enterprises, and governments. Its main products include Windows, Microsoft 365, Azure, Visual Studio/GitHub, Xbox, and LinkedIn; revenue comes from software subscriptions and licenses, cloud consumption, hardware sales, and advertising. Founded in 1975 and headquartered in Redmond, Washington, Microsoft is a public company traded on Nasdaq.