[Hiring] Senior Security Engineer @Microsoft

Role Description

The Cloud & AI organization accelerates Microsoft's mission to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers' heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day.

We are looking for a Senior Security Engineer to serve as an operator on CyberShield engagements. You will execute adversary emulation operations end-to-end and help advance agentic, AI-driven red team operations by operating, evaluating, and improving autonomous and semi-autonomous agents that discover, chain, and exploit weaknesses.

Responsibilities

• Execute CyberShield red team operations end-to-end, including initial access, privilege escalation, lateral movement and pivoting, persistence, objective completion, and reporting.
• Develop custom tooling, implants, and tradecraft to evade modern defenses and emulate the capabilities of advanced adversaries.
• Conduct agentic red team operations using AI agents for reconnaissance, vulnerability discovery, exploitation, and post-exploitation.
• Discover and exploit vulnerabilities across application, cloud, identity, network, hardware, and operational security layers.
• Work directly with customers during engagements, communicating technical findings clearly and building trusted relationships.
• Prototype and improve tools, agents, and techniques that scale offensive emulation and vulnerability discovery.
• Collaborate with Blue Teams, GHOST, MSTIC, and internal Microsoft service teams to convert findings into product hardening.
• Contribute to operational standards, playbooks, and tradecraft for CyberShield engagements.
• Advocate for security change across Microsoft and its customers.
• Embody our Culture and Values.

Qualifications

• Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in security or related field
• OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in security or related field
• OR equivalent experience.

Requirements

• Citizenship & Citizenship Verification: This role will require access to information that is controlled for export under export control regulations.
• Ability to meet Microsoft, customer and/or government security screening requirements.
• Microsoft Cloud Background Check: This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Preferred Qualifications

• 2+ years of experience executing red team or adversary emulation operations against enterprise or cloud environments.
• Hands-on experience using, building, or operating AI-driven or agentic offensive security tooling.
• Active U.S. Government TS//SCI clearance with full-scope polygraph is preferred.
• 4+ years of experience identifying and exploiting security vulnerabilities across cloud (Azure, AWS, GCP), identity (Entra ID / Active Directory), Windows and Linux endpoints, network, or hardware.
• Experience with autonomous or agentic systems using large language models.
• 2+ years of experience with coding or scripting in languages such as Python, C#, C++, Go, PowerShell, .NET, Rust, or other comparable programming languages.
• Experience working directly with customers or partners and communicating technical security findings.
• Blue team, detection engineering, or incident response experience.
• Familiarity with MITRE ATT&CK, threat-informed defense, and regulated red team frameworks.
• Contributions to the security community through research, open-source tooling, conference presentations, vulnerability disclosures, or similar work.

Compensation

The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations.

Equal Opportunity Employer

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by applicable local laws, regulations, and ordinances.