Penetration Testing Engineer

Microsoft is a global technology company that empowers every person and organization on the planet to achieve more.
$98,300 - $208,800
Security
Mid-Level Software Engineer
Remote
5,000+ Employees
3+ years of experience
Cybersecurity · Enterprise SaaS

Description For Penetration Testing Engineer

Microsoft Security is seeking a Penetration Testing Engineer to join their Regulated Industries Pentest Team. This role is crucial in securing Microsoft products and services through manual security assessments. The position offers a unique opportunity to work with cutting-edge technology and some of the brightest minds in cybersecurity.

The ideal candidate will have strong experience in identifying security vulnerabilities, performing penetration testing, and working with various security tools. You'll be responsible for simulating real-world attacks, assessing security capabilities, and documenting findings to help improve Microsoft's security posture.

The role offers competitive compensation ranging from $98,300 to $208,800 depending on location, with higher ranges for San Francisco and New York City areas. Microsoft provides comprehensive benefits including healthcare, educational resources, and parental leave.

This is an excellent opportunity for security professionals who are passionate about ethical hacking, post-exploitation techniques, and staying current with emerging threats. You'll be part of Microsoft's mission to make the world a safer place while working in a culture that embraces growth mindset, excellence, and collaboration.

The position requires 3+ years of relevant experience and offers up to 100% work from home flexibility with 0-25% travel. You'll be joining a team that values innovation, integrity, and accountability, working on critical security initiatives that impact billions of users worldwide.

Last updated 3 days ago

Responsibilities For Penetration Testing Engineer

  • Plan, research, and execute testing of computer systems and applications to simulate real world attacks
  • Assess existing security capabilities to detect and respond to emerging threats
  • Outline and document risk impacts in executive summary reports
  • Perform research to stay current with penetration testing tools and methodologies
  • Develop and maintain penetration testing procedures and methodologies
  • Conduct research to remain updated with application security techniques

Requirements For Penetration Testing Engineer

Python
JavaScript
  • 3+ years experience in identifying security vulnerabilities, software development lifecycle, and cyber security
  • 3+ years of experience in penetration testing/red-teaming, cloud, services and network security
  • 3+ years of experience using penetration testing tools (Nessus, NMAP, Metasploit, Cobalt Strike, Burp Suite Pro)
  • Must pass Microsoft Cloud Background Check
  • Must provide proof of citizenship or permanent residency
  • Coding skills in C#, Python, C++, Go, PowerShell, ASP.NET, JavaScript
  • Understanding of security attacks against server/services/network infrastructure
  • Relevant certifications preferred (GPEN, GWAPT, GXPN, OSCP, OSCE)

Benefits For Penetration Testing Engineer

Medical Insurance
Education Budget
Parental Leave
Mental Health Assistance
  • Industry leading healthcare
  • Educational resources
  • Discounts on products and services
  • Savings and investments
  • Maternity and paternity leave
  • Generous time away
  • Giving programs
  • Opportunities to network and connect

Interested in this job?

Jobs Related To Microsoft Penetration Testing Engineer

Network Security Service Engineer

Network Security Service Engineer role at Microsoft, focusing on protecting cloud infrastructure and implementing cybersecurity controls for global datacenter operations.

SECURITY SOFTWARE ENGINEER II

Microsoft Security Engineer II position focusing on red team operations, penetration testing, and security vulnerability assessment for Azure and Microsoft services.

Software Engineer II

Microsoft is hiring a Software Engineer II for their Cloud Security team to develop cryptographic features and security solutions for operating systems.

Software Engineer II - CTJ - Poly

Software Engineer II position at Microsoft focusing on security services for Azure Government Cloud, requiring Top Secret clearance and expertise in cloud computing.

Technical Support Engineer - Identity & Security (Entra)

Technical Support Engineer position at Microsoft focusing on identity and security solutions, requiring Korean language skills and offering hybrid work arrangement in Seoul.