Security Engineer II - Windows Security (Multiple Positions)

Microsoft Corporation

Redmond, WA

JOB DETAILS
SALARY
$102,100–$202,200 Per Year
SKILLS
Background Investigation, C Programming Language, C++ Programming Language, Cloud Computing, Code Reviews, Communication Skills, Compensation and Benefits, Computer Science, Computer Security, Computer Servers, Fuzz Testing, Internet Security, Mathematics, Microsoft Product Family, Microsoft Windows Operating System, Microsoft Windows Server, Network Protocols, Network Security, Operating Systems, Penetration Testing, Product Design, Product Engineering, Proof of Concept, Risk Analysis, Risk Management, Security Design, Software Engineering, Statistics
LOCATION
Redmond, WA
POSTED
3 days ago
**Overview** The Microsoft Windows Security team is looking for a learn-it-all security engineer that will help secure Microsoft Windows products and devices, with focus on offensive security and security engineering & mitigations for Windows. The Windows Security team is responsible for securing the Windows client and server operating systems, used by billions of customers every day and in businesses worldwide. This team performs security design reviews, code reviews, penetration testing, vulnerability research and driving systematic mitigations to security risks on Windows to make sure they meet the highest possible security standards and proactively defend cybersecurity threats. This role is hands-on, technically demanding, and central to strengthening the security posture of OS platforms. In this **Security Engineer II - Windows Security** role, you will uncover novel attack vectors, develop proof-of-concept mitigations, and partner directly with Windows product engineering teams to design durable & scalable defense. The ideal candidate will have hands-on experience with native code (C/C++), penetration testing (code audit, writing fuzzers, finding creative ways to break assumptions), a clear understanding of OS security fundamentals, solid computer science skills, and a passion for keeping Microsoft customers safe. Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. **Responsibilities** + Participate in security reviews to identify and mitigate risk in Microsoft products, including design reviews, code reviews, and fuzzing. + Be the security contact for teams building new innovative products and technologies in the next version of Windows and devices. + Identify security vulnerabilities in a wide variety of key OS features such as network protocols, security features, and Microsoft devices. + Leverage a broad and current understanding of security to devise new protections. + Interact with the external security community and security researchers. + Collaborate with product teams to improve security, and articulate the business value of security investments. **Qualifications** **Required Qualifications:** + Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 1+ year(s) experience in security or related field + OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 2+ years experience in security or related field + OR equivalent experience. **Other Requirements:** Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings: + **Microsoft Cloud Background Check:** This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter. **Preferred qualification:** + 2+ years identifying vulnerabilities in operating systems and/or native (C/C++) applications. + 5+ years of experience in a software engineering or security-related engineering. + Public track record of relevant security research, especially around vulnerability discovery. + Experience exploiting bugs and bypassing security mitigations in operating systems. + Familiarity with Microsoft Windows architecture. \#W+DJOBS Penetration Testing IC3 - The typical base pay range for this role across the U.S. is USD $102,100 - $202,200 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $133,800 - $219,200 per year. Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations. (https://careers.microsoft.com/v2/global/en/accessibility.html)

About the Company

M

Microsoft Corporation

DO WHAT YOU LOVE
Make your mark on the world’s most used technologies. Develop the next hit mobile application. Pioneer a startup that could be the next big thing. At Microsoft, you choose your path.

Headquartered in Redmond, Washington, Microsoft is a top innovator in both the consumer and enterprise technology industry. Just a few of the many things our products do are unleash creativity, connect businesses, and make learning more fun. But our continued success is based on one thing: our employees. We hire amazing, talented people and give them the opportunities—and the tools—to succeed.

WHY MICROSOFT?
As a Microsoft employee, you’re surrounded by a diverse group of the smartest people in your field. This fosters new ideas, better business results, and creates a dynamic work environment. In the office, you’re constantly challenged and supported by your colleagues. Every day holds something new and exciting.

We also offer unparalleled depth and breadth of career opportunities. As an industry leader in multiple fields, working for Microsoft means being able to do whatever you feel passionate about—and being able to make an impact in that field. From day one, we give our employees significant responsibility. This means that you’ll know that you directly contributed to something that has a positive impact on people worldwide. Whether you choose to work in management, dive deep into the newest technology, or explore multiple professions, you’ll find everything you need at Microsoft to drive your career—and to make a difference.

WE GET IT – YOU’RE MORE THAN YOUR JOB
Everyone works differently and is motivated by different things. We also understand that there’s more to you than your job. That’s why we offer competitive pay and a wide assortment of benefits-- to help you make the most of life at work and away from it.

GET THE BALL ROLLING
COMPANY SIZE
10,000 employees or more
INDUSTRY
Other/Not Classified
FOUNDED
1975
WEBSITE
http://www.microsoft.com