2 days ago
Remote, Australia or Sydney, AustraliaStaff+
Responsibilities
- Build reusable agents and tools to improve the consistency, quality, and speed of security reviews.
- Review product features and code for security defects and architectural risks using automated tools.
- Serve as the security contact for teams building new Windows products, technologies, and devices.
- Identify vulnerabilities in operating-system features, network protocols, security features, and Microsoft devices.
- Develop protections and systematic mitigations for security risks.
- Collaborate with product engineering teams and communicate the business value of security investments.
- Engage with the external security community and security researchers.
Requirements
- Bachelor's degree in Statistics, Mathematics, Computer Science, or a related field and 6+ years of security or related experience, or a master's degree and 4+ years of such experience, or equivalent experience.
- At least 2 years of experience identifying vulnerabilities in operating systems and/or native C/C++ applications.
- At least 5 years of software engineering or security-related engineering experience.
- Demonstrated security research experience, particularly vulnerability discovery.
- Experience exploiting bugs and bypassing security mitigations in operating systems.
- Familiarity with Microsoft Windows architecture.
- Hands-on experience with native code, penetration testing, code auditing, writing fuzzers, and OS security fundamentals.
About Microsoft
Microsoft develops operating systems, productivity software, cloud services, developer tools, and consumer devices for individuals, enterprises, and governments. Its main products include Windows, Microsoft 365, Azure, Visual Studio/GitHub, Xbox, and LinkedIn; revenue comes from software subscriptions and licenses, cloud consumption, hardware sales, and advertising. Founded in 1975 and headquartered in Redmond, Washington, Microsoft is a public company traded on Nasdaq.