1 month ago
USA (city not specified)Senior / Staff+
H1B sponsor
Base Salary
$120k - $304k/yr
Responsibilities
- Translate threat research into working vulnerability and adversary-technique scenarios across cloud, on-premises, and hybrid environments.
- Build multi-step attack chains involving applications, identities, hosts, federation, service principals, workload identities, and directory services.
- Develop automated graders and reward signals based on system state and telemetry to distinguish agent success, effective defenses, and environment failures.
- Create attack variants, benign lookalikes, patched scenarios, and simulated activity to assess detection accuracy, false positives, and memorization.
- Own scenario code, isolation, evidence capture, reset, execution limits, lab credentials, and cleanup procedures.
- Partner with threat researchers, AI engineers, and environment engineers to improve security training and evaluation.
Requirements
- Minimum qualifications include a doctorate plus 3+ years, a master's degree plus 4+ years, or a bachelor's degree plus 6+ years in a relevant field and experience in software development, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, or anomaly detection; equivalent experience is also accepted.
- Ability to pass Microsoft, customer, and/or government security screening requirements, including the Microsoft Cloud Background Check.
- Preferred qualifications include 5+ years researching vulnerabilities, conducting authorized offensive security tests, investigating incidents, or developing security tools.
- Preferred experience includes 3+ years developing and debugging security tools or scenario automation in Python, C#, Go, C/C++, or TypeScript with version control and automated tests.
- Experience reproducing vulnerabilities, documenting prerequisites and impact, validating multi-step attack chains, assessing cloud IAM, and testing authentication, permissions, and network access in Windows or Linux environments.
- Experience using source-code analysis, debugging, reverse engineering, telemetry, controlled tests, incident evidence, threat reports, red-team or purple-team exercises, and automated graders or reward functions.
Benefits
- Candidates within commuting distance of the Redmond or Reston hub are required to work on-site under a hybrid work arrangement.
- The position includes required Microsoft and Microsoft Cloud background checks upon hire or transfer and every two years thereafter.
- Certain roles may be eligible for benefits and other compensation; additional benefits and pay information is available through Microsoft’s careers site.
Tech Stack
Categories
About Microsoft
Microsoft develops operating systems, productivity software, cloud services, developer tools, and consumer devices for individuals, enterprises, and governments. Its main products include Windows, Microsoft 365, Azure, Visual Studio/GitHub, Xbox, and LinkedIn; revenue comes from software subscriptions and licenses, cloud consumption, hardware sales, and advertising. Founded in 1975 and headquartered in Redmond, Washington, Microsoft is a public company traded on Nasdaq.