17 hours ago
Remote, United States or Redmond, WA, USAMid Level
H1B sponsor
Base Salary
$102k - $219k/yr
Responsibilities
- Reproduce reported security vulnerabilities and identify their root causes.
- Design and develop automation for vulnerability discovery, reproduction, and mitigation.
- Collaborate with product teams to remediate vulnerabilities and educate them on vulnerability classes including deserialization, memory corruption, command injection, XSS, and SSRF.
- Analyze reported vulnerabilities for insights and trends.
- Contribute knowledge to the security research community.
- Conduct novel research to improve the security of Microsoft products and services.
Requirements
- Bachelor's degree in Statistics, Mathematics, Computer Science, Computer Security, or a related field and 2+ years of relevant experience, or a master's degree and 1+ year of relevant experience, or equivalent experience.
- Ability to meet Microsoft, customer, and/or government security screening requirements.
- Understanding of cybersecurity threats affecting cloud environments, particularly Microsoft environments, and ability to assess risks and recommend mitigations.
- Preferred: 2+ years of experience in security research, vulnerability analysis, and/or exploit development in on-premises and cloud environments.
- Preferred: experience investigating security risks in open-source software ecosystems, including software supply chains, dependency management, package repositories, and build automation environments.
- Preferred: experience developing, testing, or maintaining multi-agent and AI-assisted workflows for security use cases.
- Preferred: knowledge of vulnerability research, threat modeling, and security assessment methodologies across open-source technologies.
- Preferred: experience programming in C# and/or working with the .NET platform.
- Preferred: doctorate, or a master's degree with 3+ years of experience, or a bachelor's degree with 5+ years of experience, in a relevant field.
Benefits
- Certain roles may be eligible for benefits and other compensation.
- The position requires passing a Microsoft background and Microsoft Cloud background check upon hire or transfer and every two years thereafter.
- The position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until filled.
Tech Stack
C#.NETnpm
Categories
About Microsoft
Microsoft develops operating systems, productivity software, cloud services, developer tools, and consumer devices for individuals, enterprises, and governments. Its main products include Windows, Microsoft 365, Azure, Visual Studio/GitHub, Xbox, and LinkedIn; revenue comes from software subscriptions and licenses, cloud consumption, hardware sales, and advertising. Founded in 1975 and headquartered in Redmond, Washington, Microsoft is a public company traded on Nasdaq.