14 hours ago
Base Salary
$143k - $304k/yr
Responsibilities
- Identify and analyze security vulnerabilities across operating system and platform components using design review, code review, fuzzing, and variant analysis.
- Develop and influence mitigations and protections that reduce platform risk and improve resilience against vulnerability classes.
- Advocate for secure engineering practices and integrate security throughout the development lifecycle.
- Develop and scale security tooling, detection capabilities, and analysis techniques for earlier and broader vulnerability detection.
- Partner across organizations to turn security findings into systemic improvements and measurable security outcomes.
- Track attacker techniques, emerging vulnerability classes, and industry trends.
- Provide technical leadership, coordinate vulnerability and security issue resolution, and mentor peers.
Requirements
- Master's degree in Statistics, Mathematics, Computer Science, or a related field plus 4+ years of security or related experience, or a bachelor's degree in one of those fields plus 6+ years of security or related experience, or equivalent experience.
- Ability to pass Microsoft, customer, and/or government security screening requirements, including the Microsoft Cloud Background Check.
- Preferred experience with security research, operating system security, kernel or low-level platform components, vulnerability research, code review, fuzzing, reverse engineering, or exploit development.
- Preferred experience developing or applying memory safety protections, sandboxing, or platform hardening techniques.
- Preferred 4+ years of experience in security-related software engineering or another security-related field.
- Preferred 4+ years of experience with systems-level programming languages such as C, C++, or Rust.
Benefits
- Typical U.S. base pay range is USD $142,800-$274,800 per year, with a separate San Francisco Bay Area and New York City metropolitan area range of USD $188,000-$304,200 per year.
- Certain roles may be eligible for benefits and other compensation.
- The Microsoft Cloud Background Check is required upon hire or transfer and every two years thereafter.
- The position is open for a minimum of 5 days, with applications accepted on an ongoing basis until filled.
About Microsoft
Microsoft develops operating systems, productivity software, cloud services, developer tools, and consumer devices for individuals, enterprises, and governments. Its main products include Windows, Microsoft 365, Azure, Visual Studio/GitHub, Xbox, and LinkedIn; revenue comes from software subscriptions and licenses, cloud consumption, hardware sales, and advertising. Founded in 1975 and headquartered in Redmond, Washington, Microsoft is a public company traded on Nasdaq.