Principal Software Engineer - Copilot Security

Microsoft • Redmond, WA

1d • Hybrid

About The Position

Copilot Security is at the core of Microsoft’s mission to deliver trusted, human-centered AI experiences. We make security and resilience intrinsic to every Copilot interaction—across devices, platforms, and ecosystems. Our work spans secure identity flows, defenses against emerging threats like prompt injection, and privacy-first systems that scale globally. Copilot for consumers is entering a new era of agentic AI—where intelligent agents act on behalf of users across Windows, Edge, web, and mobile. We’re seeking a hands-on Principal Software Engineer to lead the development of security features and innovative solutions that harness agentic AI to both protect our customers and enable new agentic capabilities in Copilot. You’ll design, build, and ship AI-powered defenses, secure orchestration frameworks, and enabling technologies that empower Copilot to act safely and responsibly at scale. This role demands deep engineering expertise, creativity in applying agentic AI to security challenges, and a passion for building systems that balance innovation with trust. Why This Role Matters: Your work will directly shape how hundreds of millions of users experience safe, trustworthy, and innovative AI. You’ll be at the forefront of defining how agentic AI can proactively defend users, mitigate emerging threats, and unlock new secure scenarios—making a global impact on Microsoft’s most transformative products. Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. Starting January 26, 2026, MAI employees are expected to work from a designated Microsoft office at least four days a week if they live within 50 miles (U.S.) or 25 miles (non-U.S., country-specific) of that location. This expectation is subject to local law and may vary by jurisdiction.

Requirements

• Bachelor's Degree in Computer Science or related technical field AND 6+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience.

Nice To Haves

• Master's Degree in Computer Science or related technical field AND 8+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR Bachelor's Degree in Computer Science or related technical field AND 12+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience.
• 8+ years in technical engineering roles building large-scale services.
• 6+ years hands-on experience designing and operating security-critical or AI-powered systems at scale, including agentic AI, secure orchestration, or advanced threat defenses.
• Proven ability to design, build, and ship agentic AI features or frameworks
• Ability to clearly explain complex systems and security concepts to technical and non-technical stakeholders and influence cross-org roadmaps.
• Experience building production agent systems using frameworks such as LangGraph, Amazon Strands SDK, or similar platforms; familiarity with agentic design patterns including tool calling, multi-agent coordination, and secure delegation patterns
• Hands-on experience with distributed training frameworks (Ray, Slurm, HPC), containerization and orchestration technologies (Docker, Kubernetes) for ML model deployment, and ML lifecycle management in production environments
• Experience designing evaluation frameworks for LLM-based applications and implementing observability for agent systems using tools such as Phoenix, MLFlow, LangFuse, or custom eval harnesses; understanding of AI safety evaluation methodologies including adversarial testing and red-teaming
• Experience integrating with Azure AI services, Azure OpenAI Service, or Microsoft security platforms (Azure AD, Defender, Purview).
• Track record of mentoring experienced engineers, driving adoption of secure agentic AI standards across product teams, and influencing technical roadmaps while balancing innovation velocity with fundamentals.

Responsibilities

• Develop and ship agentic AI-powered security features that proactively protect users from threats such as prompt injection, adversarial manipulation, and abuse of agentic workflows.
• Design and implement secure orchestration frameworks that enable Copilot to safely delegate, coordinate, and execute actions across devices, services, and platforms.
• Invent and apply new intelligent agents that leverage information flow analysis and apply common sense and judgement guardrails for security and privacy.
• Collaborate with product, engineering, security, privacy, and AI teams to drive adoption of agentic security patterns and best practices across Copilot and MAI.
• Establish and monitor key metrics for agentic AI security and innovation, using data-driven insights to continuously improve defenses and enablement.
• Align with central Microsoft security and AI roadmaps, influencing platform capabilities and landing them in Copilot and MAI consumer scenarios.
• Document and evangelize secure agentic AI patterns, ensuring they address novel risks, support safe delegation, and enable responsible orchestration of actions.
• Mentor engineers and foster a culture of secure innovation, balancing rapid development with rigorous protection for customers.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal
• Number of Employees: 5,001-10,000 employees