2 months ago
Herẕliyya, IsraelSenior
Responsibilities
- Lead security design and architecture reviews and structured threat-modeling engagements for complex systems.
- Analyze architectures for trust-boundary violations, architectural vulnerabilities, unsafe assumptions, and security-driven redesign opportunities.
- Partner with engineering and security teams to influence architecture and secure design patterns early in the product lifecycle.
- Perform manual and AI-augmented security analysis and validate findings using engineering judgment.
- Design, prototype, and build AI-assisted capabilities for design review, threat modeling, architecture analysis, vulnerability discovery, and security workflows.
- Experiment with automation and AI approaches to improve the scale, depth, and consistency of security reviews.
- Communicate security findings, design tradeoffs, and mitigations to technical and non-technical stakeholders.
- Drive security hardening and systemic security redesign efforts.
- Evolve security engineering methodology, tooling, and practices as AI changes product and security analysis development.
Requirements
- Strong experience in security engineering, security architecture, or related technical security roles.
- Deep technical knowledge in areas such as operating system internals, Windows/Linux, memory management, boot security, platform security, virtualization, confidential computing, cloud architecture, container security, Kubernetes, AKS, application security, secure software development, cloud-native security, identity, secrets management, isolation, and service-to-service trust.
- Experience building with modern AI technologies to solve engineering or security problems and designing AI-augmented expert workflows.
- Expertise in structured threat modeling, architectural risk analysis, complex systems, and trust boundaries.
- Ability to prototype and build security tools rather than only use existing tooling.
- Experience integrating LLMs or AI agents with engineering workflows, tools, data sources, or analysis pipelines.
- Experience applying AI to threat modeling, design analysis, code analysis, vulnerability discovery, or security automation.
- Understanding of security challenges in AI-enabled systems and ability to threat-model systems with AI components.
- Experience with scalable security analysis, including static analysis, dynamic analysis, code analysis, or custom security automation.
- Prior expertise with Azure-based solutions and services.
- Strong understanding of secure coding and code review principles.
- Proven ability to lead cross-functional technical engagements and influence engineering teams without direct authority.
- At least 6 years of experience in security engineering, architecture, software engineering, or related roles.
- Demonstrated success leading security design reviews, threat modeling, or architectural security assessments for complex systems.
- Track record of identifying and helping mitigate significant architectural or system-level security weaknesses.
Tech Stack
Categories
About Microsoft
Microsoft develops operating systems, productivity software, cloud services, developer tools, and consumer devices for individuals, enterprises, and governments. Its main products include Windows, Microsoft 365, Azure, Visual Studio/GitHub, Xbox, and LinkedIn; revenue comes from software subscriptions and licenses, cloud consumption, hardware sales, and advertising. Founded in 1975 and headquartered in Redmond, Washington, Microsoft is a public company traded on Nasdaq.