Penetration Tester: Internship Opportunity

Microsoft • Redmond, WA

1d • $5,610 - $11,010

About The Position

Come build community, explore your passions and do your best work at Microsoft with thousands of University interns from every corner of the world. This opportunity will allow you to bring your aspirations, talent, potential—and excitement for the journey ahead. SERPENT (Services Pentest) is looking for a learn-it-all engineer excited to secure Microsoft products and devices through real-world penetration testing, research, and security innovation. Are you looking for a challenge that puts you at the center of the Microsoft Specialized Clouds strategy? Are you passionate about solving the security challenges of critical, large-scale online services? Do you want to learn how Microsoft defends some of the world’s most important cloud and device ecosystems? If you’re passionate about penetration testing, variant research, and hands-on security, this role is for you. Microsoft’s Specialized Clouds organization is responsible for securing some of Microsoft’s largest and most influential online services across the Adaptive Cloud and Windows + Devices (W+D) organization. The EPSF Services Pentest (SERPENT) team is expanding and looking for interns who want to grow their offensive security skills while helping increase our business partners’ security posture. EPSF Security has a world-class penetration testing team that helps ensure a safe, resilient experience for millions of users worldwide. We focus heavily on offensive security, application security, variant discovery, and collaborating with defensive teams to enhance detection and operational awareness. At Microsoft, Interns work on real-world projects in collaboration with teams across the world, while having fun along the way. You’ll be empowered to build community, explore your passions and achieve your goals. This is your chance to bring your solutions and ideas to life while working on cutting-edge technology. Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Requirements

• Candidate must be enrolled in a full time bachelor's or masters program in an area relevant for the role during the academic term immediately before their internship.
• Must have at least one semester or term of school remaining following the completion of the internship

Nice To Haves

• Familiarity with reading Python or C#
• Demonstrated interest in cybersecurity, penetration testing, or vulnerability research
• Curiosity, willingness to learn, ability to ask strong technical questions, and passion for solving complex problems
• Participation in Capture the Flag (CTF) challenges, security labs, hackathons, or research projects
• Coding experience in C#, Java, Python, Rust, Go, or JavaScript/TypeScript
• Familiarity with cloud concepts (Azure preferred) or distributed systems
• Understanding of static analysis or experience auditing code for vulnerabilities
• Knowledge of memory corruption, web security, identity, authentication, or operating system internals

Responsibilities

• Participate in penetration tests, security reviews, and variant-hunting exercises for Microsoft products and services—including design reviews, code reviews, and exploit proof-of-concept development
• Support analysis of emerging threats and contribute to improving the security of next-generation Windows, Azure, and specialized cloud services
• Apply a current and evolving understanding of offensive security techniques to propose new protections and reinforce secure design
• Engage with internal and external security researchers, contributing to a culture of curiosity and continuous learning
• Collaborate with product teams to improve security posture and articulate the business value of security insights
• Participate in the SERPENT OODA Loop (Observe → Orient → Decide → Act) to scale offensive insights across Microsoft

What This Job Offers

• Career Level: Intern
• Number of Employees: 5,001-10,000 employees