Software Engineer II (Security)

Share job

Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end to end, simplified solutions.

The Microsoft Security organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world.

The ‘Microsoft Red Team: Engineering’ team builds red team tools, host-based malware, and cloud attack tooling for the central Microsoft red team. We work with red team operators to understand what capabilities they need to succeed in their operations, and deliver useful and reliable offensive capabilities. We are looking for a Software Engineer II (Security) who is interested in growing adversary tooling experience, and learning from some of the most experienced red team tool developers in the industry.

In this role, your job will be to become an expert in malware development, and to make sure that our partner red teams have what they need to achieve their goals.

Our engineers come from diverse backgrounds, are passionate and loyal to coworkers and our products, and grounded in our customers’ needs. Our team values a thoughtful engineering mindset, the ability to develop strong relationships with your peers and partners, and the ability to focus on the outcomes that matter. Microsoft’s mission is to empower every person and every organization on the planet to achieve more.

As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.

Required Qualifications:

· Bachelor's Degree in Computer Science or related technical field AND 2+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python

o OR equivalent experience.

. 2 years of software development experience Security Engineering, Offensive Security, Pen Testing, or Red Teaming

Other Requirements:

. Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:

This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Additional or Preferred Qualifications:

· Bachelor's Degree in Computer Science or related technical field AND 4+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python

o OR Master's Degree in Computer Science or related technical field AND 2+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python

o OR equivalent experience.

Software Engineering IC3 - The typical base pay range for this role across the U.S. is USD $98,300 - $193,200 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $127,200 - $208,800 per year. Certain roles may be eligible for benefits and other compensation.

Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay

Microsoft will accept applications for the role until December 31 , 2024.

#MsftSecurity #mrtjobs #microsoftredteam #RedTeam

- Ensuring red teams are successful by designing, implementing, and maintaining host-based remote access tools, cloud-focused offensive tools, and host and cloud-based detection bypasses

- Developing your skills and experience with host-based malware techniques, cloud attack techniques, detection evasion, and malware development principles by learning from your peers

- Building strong relationships with offensive security teams across Microsoft to understand and predict their needs - Supporting operational red teams in leveraging your tooling successfully

- Researching offensive techniques and translating these techniques into impactful, reliable, production-ready tooling for use by red team operators

- Partnering with peers on automating the tools you develop for use in autonomous adversary emulation services - Planning, rationalizing, justifying, and prioritizing features and user requests

- Teaching defensive security teams about attacker techniques and capabilities - Developing talent in offensive security teams across Microsoft through mentorship, office hours, and one-on-one sessions