3 days ago
Remote, Canada or Vancouver, CanadaStaff+
Responsibilities
- Conduct vulnerability research and offensive security assessments across Windows using code auditing, fuzzing, penetration testing, and exploitation.
- Investigate complex security vulnerabilities and novel attack vectors and develop durable defenses.
- Review product architecture, features, and native code for vulnerabilities and architectural risks using manual and automated security analysis.
- Develop proof-of-concept exploits and scalable mitigations for vulnerabilities and broader classes of security issues.
- Design and build reusable security tools and automation for security reviews and vulnerability discovery.
- Partner with Windows product engineering teams to incorporate security into product design and architecture.
- Engage with internal and external security communities to track emerging vulnerabilities and attack techniques.
Requirements
- Master's degree in Statistics, Mathematics, Computer Science, or a related field plus 3+ years of security or related experience, or bachelor's degree in one of these fields plus 4+ years, or equivalent experience.
- Hands-on experience with offensive security techniques such as penetration testing, vulnerability research, exploit development, or bypassing operating-system security mitigations.
- Experience identifying vulnerabilities in operating systems and/or native C/C++ applications.
- Preferred: master's degree plus 6+ years or bachelor's degree plus 8+ years of security or related experience, or equivalent experience.
- Preferred: 5+ years of experience in software engineering, security engineering, or a related technical field.
- Preferred: demonstrated security research and vulnerability discovery experience.
- Preferred: experience exploiting vulnerabilities and bypassing security mitigations in operating systems.
- Preferred: familiarity with Microsoft Windows architecture and operating-system internals.
About Microsoft
Microsoft develops operating systems, productivity software, cloud services, developer tools, and consumer devices for individuals, enterprises, and governments. Its main products include Windows, Microsoft 365, Azure, Visual Studio/GitHub, Xbox, and LinkedIn; revenue comes from software subscriptions and licenses, cloud consumption, hardware sales, and advertising. Founded in 1975 and headquartered in Redmond, Washington, Microsoft is a public company traded on Nasdaq.