1 day ago
Base Salary
$120k - $261k/yr
Responsibilities
- Lead large-scale security assessments spanning architecture and design reviews, threat modeling, penetration testing, vulnerability analysis, and control validation.
- Analyze technical evidence to identify trust boundaries, attack paths, data exposure, identity and privilege risks, software supply-chain weaknesses, and systemic security threats.
- Evaluate products and services against security baselines and drive remediation or compensating controls with engineering, operations, research, and technology-provider stakeholders.
- Provide security and architectural guidance throughout the development lifecycle and create reusable secure requirements, patterns, and best practices.
- Coordinate priorities, dependencies, schedules, milestones, risk assessments, and stakeholder effort for complex multi-team security reviews.
- Report findings, recommendations, risk, control effectiveness, and program outcomes while monitoring security events, vulnerabilities, exposures, and compliance issues.
- Develop and drive adoption of security-assessment methodologies, self-service resources, readiness frameworks, automated workflows, and security tooling.
- Use machine learning and generative AI appropriately to improve vulnerability identification, control validation, coverage, and operational efficiency.
- Maintain expertise across application security, cloud security, identity and access management, data protection, vulnerability management, incident response, and enterprise security tools.
- Share expertise through technical guidance, coaching, and technical forums.
Requirements
- Master’s degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or a related field plus 3+ years of experience in software development lifecycle, large-scale computing, threat modeling, cybersecurity, or anomaly detection; or a bachelor’s degree in a related field plus 4+ years of applicable experience; equivalent experience is accepted.
- Ability to meet Microsoft, customer, and/or government security screening requirements, including the Microsoft background and Microsoft Cloud background checks upon hire or transfer and every two years thereafter.
- Preferred: master’s degree plus 6+ years or bachelor’s degree plus 8+ years of applicable enterprise experience.
- Preferred: experience independently leading complex security assessments from architecture review through risk identification, remediation, and control validation.
- Preferred: experience building or scaling third-party, vendor, supply-chain, or comparable security-assurance programs in a large-scale technology environment.
- Preferred: knowledge of application, SaaS, and cloud architectures, APIs, identity federation, OAuth, OpenID Connect, privileged access, data protection, and software supply-chain security.
- Preferred: experience designing scalable software, automation, or security tooling for assessment coverage, control validation, attack-surface identification, or continuous security monitoring.
- Preferred: experience with on-premises and multicloud environments or enterprise security technologies such as DLP, DSPM, SSPM, or EDR.
- Preferred: ability to communicate complex technical security risks clearly and influence engineering, business, and technology-provider leaders.
Benefits
- Certain roles may be eligible for benefits and other compensation.
- The position is open for a minimum of five days, with applications accepted on an ongoing basis until filled.
- Employment requires periodic Microsoft background and Microsoft Cloud background checks.
Categories
About Microsoft
Microsoft develops operating systems, productivity software, cloud services, developer tools, and consumer devices for individuals, enterprises, and governments. Its main products include Windows, Microsoft 365, Azure, Visual Studio/GitHub, Xbox, and LinkedIn; revenue comes from software subscriptions and licenses, cloud consumption, hardware sales, and advertising. Founded in 1975 and headquartered in Redmond, Washington, Microsoft is a public company traded on Nasdaq.