Senior Research Engineer - AI Security

Overview

The Copilot Security Engineering team is at the core of Microsoft's mission to deliver secured , trusted, human-centered AI experiences across the company's Copilot offerings. We design, build, and operate systems that help identify, evaluate, and mitigate emerging AI security threats, covering adversarial testing frameworks, telemetry pipelines, evaluation systems, and production security defenses. Our goal is to be the industry leader in delivering best-in-class AI security protections for our enterprise customers.

We are looking for a Senior Research Engineer (Machine Learning Engineer) who is passionate about translating research ideas into scalable, reliable ML systems. This role is ideal for candidates with strong engineering fundamentals and experience in the security domain and working with machine learning systems, along with an interest in prototyping, experimentation, and system-building. You will partner closely with Applied Scientists, Software Engineers, Product Managers, and Data Scientists to bring AI innovations into production reality and deliver reliable, high-performing security solutions for Copilot.

In this role, you will spend much of your time defining threat scenarios, building datasets and evaluation loops, training or tuning detection and classification models, integrating defenses into production services, and using telemetry to improve precision and recall over time. Your work will directly shape the security posture for Copilot and contribute to the necessary systems and guardrails for Copilot to operate safely and earn user trust at global scale.

Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities

• Design, deploy, and operate production-scale ML systems that protect Copilot experiences, ensuring high reliability, performance, and security at global scale, targeting threats such as prompt injections, adversarial inputs, and agentic workflow abuse.
• Develop adaptive detection and policy models that are capable of learning from evolving attacker behavior to offer durable protection against emerging AI security threats.
• Build and own evaluation frameworks for AI security, including adversarial testing, red‑teaming support, and continuous robustness measurement across real Copilot scenarios.
• Define success metrics and conduct rigorous experimentation to quantify security effectiveness, adversarial robustness, precision/recall tradeoffs, and user experience impact.
• Partner with security and engineering teams to integrate ML defenses into secure orchestration frameworks that govern agent delegation, tool calling, and action execution.
• Monitor and analyze telemetry to improve model performance, reduce false positives/negatives, and guide iterative defense improvements.
• Collaborate cross‑functionally with product, privacy, and AI platform teams to land agentic security patterns across Microsoft Copilot ecosystem.
• Document and share applied ML security techniques, helping establish best practices for secure agentic AI across Microsoft.
• On-call Engineering Duties

Qualifications

Required Qualifications:

• Bachelors Degree in Computer Science or related technical field AND 4+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
• OR equivalent experience.

Other Requirements:

• Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings:

Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Preferred Qualifications:

• Masters Degree in Computer Science or related technical field AND 6+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python

• OR Bachelors Degree in Computer Science or related technical field AND 8+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python

• OR equivalent experience.

• 4+ years of hands-on experience building and shipping machine learning, detection, ranking, classification, or data-driven decision systems in production.

• Experience building systems related to adversarial testing, evaluation frameworks, telemetry/observability pipelines, or risk‑measurement infrastructure.

• Solid foundation in ML fundamentals, including classification, anomaly detection, representation learning, and model evaluation.

• Experience designing end to end ML pipelines: data collection, training, evaluation, deployment, and monitoring.

• Understanding of agentic AI risks (e.g., jailbreaks, prompt injection, toolchain misuse) and threat‑driven engineering.

• Experience working on AI safety, trust, or security adjacent ML problems, including prompt injection, abuse detection, or adversarial ML.

• Familiarity with distributed systems, cloud-based services, secure system design patterns, or security-sensitive production environments.

• Ability to clearly communicate complex ML and security concepts to engineering and non ML stakeholders.

#Copilot, #LLM, #Agent, #AI Security

Software Engineering IC4 - The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $160,200 - $261,000 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:

https://careers.microsoft.com/us/en/us-corporate-pay

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.