Principal Security Engineer

Job summary

Conduct vulnerability research and offensive security assessments to identify complex risks within Windows products. Develop proof-of-concept exploits and design scalable, durable security mitigations to protect against evolving threats.

Job details

Overview The Microsoft Windows Security team is looking for a Principal Security Engineer to help secure Windows products and devices through offensive security, vulnerability research, and the development of scalable security mitigations. The Windows Security team helps protect Windows client and server operating systems used by customers and businesses worldwide. The team performs security design and code reviews, penetration testing, and vulnerability research while developing defenses that strengthen Windows against evolving cybersecurity threats. In this role, you will identify and investigate complex security vulnerabilities and novel attack vectors across Windows, develop proof-of-concept exploits, and design durable mitigations for individual vulnerabilities and broader classes of security issues. You will apply deep knowledge of native code, operating system security, vulnerability research, and offensive security techniques while partnering with Windows engineering teams to incorporate security into product architecture and design. Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees, we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day, we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond Responsibilities Conduct vulnerability research and offensive security assessments across Windows, using techniques such as code auditing, fuzzing, penetration testing, and exploitation to identify vulnerabilities and no complex security risks, and develop durable defenses. Engage with internal and external security communities to understand emerging vulnerabilities, attack techniques, and opportunities to strengthen Windows securityvel attack vectors. Review product architecture, features, and native code to identify security vulnerabilities and architectural risks using manual and automated security analysis techniques. Develop proof-of-concept exploits and scalable mitigations that address identified vulnerabilities and broader classes of security issues. Design and build reusable security tools and automation that improve the efficiency, consistency, and quality of security reviews and vulnerability discovery. Partner with Windows product engineering teams to incorporate security into product design, resolve Qualifications Required/minimum qualifications Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in security or related field OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 6+ years experience in security or related field OR equivalent experience. Hands-on experience with offensive security techniques such as penetration testing, vulnerability research, exploit development, or bypassing operating-system security mitigations Experience identifying vulnerabilities in operating systems and/or native (C/C++) applications. Additional or preferred qualifications Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 8+ years experience in security or related field OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 12+ years experience in security or related field OR equivalent experience. 5+ years of experience in software engineering, security engineering, or a related technical field. Demonstrated experience in security research, particularly vulnerability discovery. Experience exploiting vulnerabilities and bypassing security mitigations in operating systems. Familiarity with Microsoft Windows architecture and operating system internals. Penetration Testing IC5 - The typical base pay range for this role across Canada is CAD $142,400 - CAD $257,500 per year. Find additional pay information here: https://careers.microsoft.com/v2/global/en/canada-pay-information.html Penetration Testing IC5 - L'échelle salariale de base typique pour ce rôle dans l'ensemble du Canada est de 142,400 $ CAD à 257,500 $ CAD par année. Pour plus d'information au sujet de la rémunération, veuillez cliquer ici: https://careers.microsoft.com/v2/global/en/canada-pay-information.html Ce poste sera ouvert pendant au moins cinq jours et les candidatures seront acceptées de façon continue jusqu’à ce que le poste soit pourvu. This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft est un employeur offrant l’égalité d’accès à l’emploi. Tous les candidats qualifiés seront pris en considération pour l’emploi, sans égard à l’âge, à l’ascendance, à la citoyenneté, à la couleur, aux congés médicaux ou familiaux, à l’identité ou à l’expression de genre, aux renseignements génétiques, à l’état d’immigration, à l’état matrimonial, à l’état de santé, à l’origine nationale, à un éventuel handicap physique ou mental, à l’affiliation politique, au statut de vétéran protégé ou au statut militaire, à la race, à l’ethnie, à la religion, au sexe (y compris la grossesse), à l’orientation sexuelle ou à toute autre caractéristique protégée par les lois, ordonnances et règlements locaux applicables. Si vous avez besoin d’aide avec des accommodements religieux et/ou d’un accommodement raisonnable en raison d’un handicap pendant le processus de candidature, apprenez-en plus sur la demande d’accommodement. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations. Read more

What you’ll do

Conduct vulnerability research and offensive security assessments to identify complex risks within Windows products. Develop proof-of-concept exploits and design scalable, durable security mitigations to protect against evolving threats.

Requirements

Requires a Bachelor's or Master's degree in a technical field with extensive experience in security research and exploit development. Candidates must possess deep knowledge of Windows internals and native code security.

Listed skills

• C++ · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Vulnerability Research
• Offensive Security
• Penetration Testing
• Exploit Development
• Windows Architecture
• Operating System Internals
• C++
• Native Code
• Fuzzing
• Code Auditing
• Security Mitigations
• Security Analysis
• Automation
• Threat Modeling
• Proof Of Concept (POC) Development
• Attack Vectors
• Security Tools
• Windows Security
• Accountability
• Growth Mindedness
• Windows Client
• C (Programming Language)
• Microsoft Windows
• Research
• Auditing
• C++ (Programming Language)
• Code Review
• Computer Science
• Cyber Security
• Operating Systems
• Fuzz Testing
• Scalability
• Innovation
• Security Engineering
• Mathematics
• Product Design
• Product Engineering
• Software Engineering
• Statistics
• Vulnerability Discovery

Job areas

• Security & Safety
• Software
• Technology
• Engineering
• Principal Engineer
• Cyber Security Engineer
• Database and Network Professionals Not Elsewhere Classified
• Information Security Engineers
• Computer Occupations, All Other

More jobs from Microsoft