2 days ago
Base Salary
$120k - $261k/yr
Responsibilities
- Execute CyberShield red team and adversary emulation operations end-to-end across Microsoft and selected customer environments.
- Develop custom tooling, implants, and offensive tradecraft to evade defenses and emulate advanced adversaries.
- Operate, evaluate, and improve AI-driven agents for reconnaissance, vulnerability discovery, exploitation, and post-exploitation with human oversight.
- Discover and exploit vulnerabilities across application, cloud, identity, network, hardware, and operational security layers and chain them into realistic attack paths.
- Communicate technical findings to customer security teams and build trusted customer relationships.
- Prototype tools, agents, and techniques that scale offensive emulation and vulnerability discovery.
- Collaborate with Blue Teams, GHOST, MSTIC, and Microsoft service teams to improve product hardening and defender readiness.
- Contribute to operational standards, playbooks, and CyberShield tradecraft and share expertise across the Microsoft Red Team.
Requirements
- A master’s degree in Statistics, Mathematics, Computer Science, or a related field plus 3+ years of security or related experience, or a bachelor’s degree in one of these fields plus 4+ years of security or related experience, or equivalent experience.
- Ability to meet Microsoft, customer, and/or government security screening requirements, including the Microsoft Cloud Background Check.
- Citizenship or qualifying permanent-resident/protected-status documentation and citizenship verification are required for access to export-controlled information.
- Preferred experience includes at least 2 years executing red team or adversary emulation operations against enterprise or cloud environments.
- Preferred hands-on experience using, building, or operating AI-driven or agentic offensive security tooling.
- Preferred 4+ years identifying and exploiting vulnerabilities across Azure, AWS, GCP, Entra ID, Active Directory, Windows, Linux, network, or hardware environments.
- Preferred experience with large-language-model-based autonomous or agentic systems, including tool use, orchestration, evaluation, or safety guardrails.
- Preferred 2+ years coding or scripting with languages such as Python, C#, C++, Go, PowerShell, .NET, or Rust, including offensive tooling development or modification.
- Preferred experience communicating security findings to technical and non-technical audiences, plus blue-team, detection-engineering, or incident-response experience.
- Familiarity with MITRE ATT&CK, threat-informed defense, TIBER-EU, CBEST, or DORA is preferred.
- Security-community contributions through research, open-source tooling, conference presentations, or vulnerability disclosures are preferred.
- An active U.S. Government TS//SCI clearance with full-scope polygraph is preferred.
Benefits
- Typical U.S. base pay is USD $119,800–$234,700 per year; the San Francisco Bay Area and New York City metropolitan areas have a separate USD $160,200–$261,000 range.
- Certain roles may be eligible for benefits and other compensation.
- The position is open for at least 5 days, with applications accepted on an ongoing basis until filled.
Categories
About Microsoft
Microsoft develops operating systems, productivity software, cloud services, developer tools, and consumer devices for individuals, enterprises, and governments. Its main products include Windows, Microsoft 365, Azure, Visual Studio/GitHub, Xbox, and LinkedIn; revenue comes from software subscriptions and licenses, cloud consumption, hardware sales, and advertising. Founded in 1975 and headquartered in Redmond, Washington, Microsoft is a public company traded on Nasdaq.