1 day ago
Base Salary
$120k - $261k/yr
Responsibilities
- Design, build, and evolve the MDASH scanning engine for agent orchestration, multi-model routing, code understanding, vulnerability detection, reachability validation, and fix generation and verification.
- Extend scanning coverage across vulnerability classes, programming languages, frameworks, build systems, and codebase sizes.
- Integrate static and dynamic analysis, taint tracking, call-graph and data-flow analysis, fuzzing, and sandboxed execution into agent workflows.
- Improve detection precision, recall, consistency, and fix quality using evaluation results, research findings, and production feedback.
- Optimize scan performance, scalability, cost, and latency for enterprise codebases and CI/CD workflows.
- Build a secure, reliable, observable engine with strong isolation for untrusted code and telemetry for diagnosing agent behavior.
- Collaborate with security research, applied science, model, and product teams to ship new techniques and models.
- Write tested code, lead design reviews, participate in code reviews and on-call rotations, mentor engineers, and contribute to an inclusive engineering culture.
Requirements
- Bachelor’s degree in Computer Science or a related technical field and 4+ years of technical engineering experience coding in languages including C, C++, C#, Java, JavaScript, TypeScript, or Python, or equivalent experience.
- Ability to meet Microsoft, customer, and/or government security screening requirements, including the Microsoft Cloud Background Check.
- Preferred: master’s degree and 6+ years of technical engineering experience, or bachelor’s degree and 8+ years of experience, or equivalent experience.
- Preferred experience building production systems with large language models, AI agents, multi-agent orchestration, tool calling, planning, context management, or code-understanding systems.
- Preferred experience with security scanners, SAST, DAST, software composition analysis, compilers, or other program analysis tools.
- Working knowledge of vulnerability classes including memory safety, injection, authentication and authorization, deserialization, path traversal, SSRF, and business-logic flaws.
- Preferred experience with taint analysis, data-flow and control-flow analysis, code property graphs, fuzzing, or symbolic execution.
- Preferred experience building distributed, high-scale cloud services on Azure, including containerized or sandboxed execution.
- Familiarity with multiple software ecosystems and build systems across C/C++, C#, Java, JavaScript/TypeScript, Python, and cloud-native applications.
Tech Stack
Categories
About Microsoft
Microsoft develops operating systems, productivity software, cloud services, developer tools, and consumer devices for individuals, enterprises, and governments. Its main products include Windows, Microsoft 365, Azure, Visual Studio/GitHub, Xbox, and LinkedIn; revenue comes from software subscriptions and licenses, cloud consumption, hardware sales, and advertising. Founded in 1975 and headquartered in Redmond, Washington, Microsoft is a public company traded on Nasdaq.