Senior Software Security Engineer
Description For Senior Software Security Engineer
The Microsoft Offensive Research & Security Engineering (MORSE) team is seeking a Senior Software Security Engineer to help secure Microsoft products and devices. This role is crucial in protecting Windows client and server operating systems used by billions of customers daily across businesses and Azure. The team conducts security design reviews, code reviews, and penetration testing on key Windows and Azure features.
The ideal candidate will have extensive hands-on experience with native code (C/C++), penetration testing, and a deep understanding of OS security fundamentals. You'll work directly with engineering teams to secure Microsoft's operating systems, participating in security reviews, identifying vulnerabilities, and devising new protections.
This position offers the flexibility of up to 100% remote work with minimal travel requirements (0-25%). The compensation is competitive, ranging from $117,200 to $229,200 per year (higher in SF Bay Area and NYC), along with comprehensive benefits including healthcare, educational resources, and parental leave.
As part of Microsoft's mission to empower global achievement, you'll join a culture emphasizing growth mindset, innovation, and collaboration. The role requires strong technical expertise in security vulnerability identification, software development lifecycle, and anomaly detection, with opportunities to interact with the external security community and influence product security across Microsoft's ecosystem.
Responsibilities For Senior Software Security Engineer
- Participate in security reviews to identify and mitigate risk in Microsoft products, including design reviews, code reviews, and fuzzing
- Be the security contact for teams building new innovative products and technologies in Windows, Azure, and devices
- Identify security vulnerabilities in OS features such as network protocols, security features, and Microsoft devices
- Leverage understanding of security to devise new protections
- Interact with the external security community and security researchers
- Collaborate with product teams to improve security and articulate business value of security investments
Requirements For Senior Software Security Engineer
- 5+ years experience in identifying security vulnerabilities, software development lifecycle, large-scale computing, modeling, cyber security, and anomaly detection
- 3+ years identifying vulnerabilities in operating systems and/or native (C/C++) applications
- Public track record of relevant security research, especially around vulnerability discovery
- Experience exploiting bugs and bypassing security mitigations in operating systems
- Familiarity with Microsoft Windows architecture
- Must pass Microsoft Cloud Background Check
Benefits For Senior Software Security Engineer
- Industry leading healthcare
- Educational resources
- Discounts on products and services
- Savings and investments
- Maternity and paternity leave
- Generous time away
- Giving programs
- Opportunities to network and connect
