2 days ago
Base Salary
$143k - $304k/yr
Responsibilities
- Design, build, and evolve the MDASH scanning engine for agent orchestration, multi-model routing, code understanding, vulnerability detection, reachability validation, and fix generation and verification.
- Expand coverage across vulnerability classes, programming languages, frameworks, build systems, and codebase sizes, including large monorepos.
- Integrate static and dynamic analysis, taint tracking, call-graph and data-flow analysis, fuzzing, and sandboxed execution into agent workflows.
- Improve detection precision and recall, consistency, fix quality, scan performance, scalability, cost, and latency.
- Build a secure, reliable, observable engine with strong isolation for untrusted code and telemetry for diagnosing agent behavior.
- Collaborate with security researchers, applied scientists, model teams, and product managers to bring new techniques and models into production.
- Lead design reviews, participate in code reviews and on-call rotations, mentor engineers, and help raise the team’s engineering standards.
Requirements
- Bachelor’s degree in Computer Science or a related technical field and 6+ years of technical engineering experience coding in languages including C, C++, C#, Java, JavaScript, TypeScript, or Python, or equivalent experience.
- Ability to meet Microsoft, customer, and/or government security screening requirements, including the Microsoft Cloud Background Check.
- Preferred: master’s degree with 8+ years of experience, or bachelor’s degree with 12+ years of experience, or equivalent experience.
- Experience building production systems with large language models, including AI agents, multi-agent orchestration, tool calling, planning, context management, or code-understanding systems.
- Experience with security scanners, static analysis, dynamic analysis, software composition analysis, compilers, or other program analysis tools.
- Working knowledge of vulnerability classes including memory safety, injection, authentication and authorization, deserialization, path traversal, SSRF, and business-logic flaws.
- Experience with taint analysis, data-flow and control-flow analysis, code property graphs, fuzzing, or symbolic execution.
- Experience building distributed, high-scale cloud services on Azure, including containerized or sandboxed execution.
- Familiarity with multiple software ecosystems and build systems across C/C++, C#, Java, JavaScript/TypeScript, Python, and cloud-native applications.
Benefits
- Typical U.S. base pay range is USD $142,800-$274,800 per year, with a separate San Francisco Bay Area and New York City range of USD $188,000-$304,200 per year.
- Certain roles may be eligible for benefits and other compensation.
- The position is open for a minimum of five days, with applications accepted on an ongoing basis until filled.
- Successful candidates must pass the Microsoft Cloud Background Check upon hire or transfer and every two years thereafter.
Tech Stack
Categories
About Microsoft
Microsoft develops operating systems, productivity software, cloud services, developer tools, and consumer devices for individuals, enterprises, and governments. Its main products include Windows, Microsoft 365, Azure, Visual Studio/GitHub, Xbox, and LinkedIn; revenue comes from software subscriptions and licenses, cloud consumption, hardware sales, and advertising. Founded in 1975 and headquartered in Redmond, Washington, Microsoft is a public company traded on Nasdaq.