Principal Software Engineer

Microsoft • Atlanta, GA

392d • $137,600 - $267,000 • Remote

About The Position

Microsoft runs on trust. Earning and keeping that trust has never been more important. In Customer Security and Trust (CST), program managers, engineers, analysts, investigators, data scientists, attorneys, and business professionals are responsible for some of the most exciting projects at Microsoft focused on protecting our customers. The Cybersecurity & Trust Engineering team (CSTE) in CST is the central driving force of Engineering and Cybersecurity initiatives for CST and for Microsoft Corporate, External and Legal Affairs (CELA) as a whole. The Security and Privacy Engineering (SPE) team is responsible for embedding security and privacy considerations into all facets of the organization's operations. SPE team is instrumental in identifying critical risks, providing engineering and cybersecurity expertise to implement effective mitigations, and working closely with diverse stakeholders across the company and external organizations to safeguard information assets and ensure compliance with all relevant regulations and standards. We are hiring a Principal Software Engineer to join our team. This role will be part of the SPE team, contributing to security initiatives within the organization and across CELA Division with the opportunity of bigger impact. You will contribute to strategic projects and assignments to help increase the security posture of cloud infrastructure and services, assessing security and privacy risks and contribute to improvements and remediation of issues. This is a unique opportunity within Microsoft to work in a dynamic and collaborative team with impact across many services harvesting the power of the cloud, apply your Security and technical skills to empower analysts and investigators to keep our digital world safe for consumers and businesses across the globe. A successful candidate will be passionate about secure development practices and architecture, reliability, cloud computing and automation necessary to strengthen the resiliency and security posture of our services and infrastructure. Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Requirements

• Bachelor's Degree in Computer Science, or related technical discipline AND 6+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
• 5+ years experience with common security vulnerabilities and associated mitigations
• 5+ years of experience with Azure services, including containers (AKS), App services, Azure Storage technologies, and best practices to secure these services
• 2+ years experience working as part of an engineering team, or as a partner of the engineering team, to implement secure development lifecycle practices
• 2+ years experience articulating business needs for security improvements

Nice To Haves

• CISSP Certification and / or SANS Security Training
• Understanding of cryptography
• Experience with Containers and Azure Kubernetes including security best practices
• Experience implementing Networking Security, API management, Identity and Access management

Responsibilities

• Establish collaboration with Engineering teams in CSTE and across CELA on new features, services, and updates to the product
• Participate in threat model reviews and help identify security flaws early in the design phases
• Foster onboarding and adoption of Security Development Lifecycle (SDL)
• Help design implementation of Defense in Depth and Zero Trust strategies while ensuring secure by design, security by default, and secure by deployment principles
• Lead security architecture reviews
• Provide guidance and recommendations for secure development
• Fix security issues in code or infrastructure
• Participate in code reviews to evaluate security risks and improvements
• Lead cloud incident response activities as they occur
• Promote security awareness and provide training and good coding practices
• Supports operational security and security incidents as well as security reviews
• Help define, document, evolve, and evangelize secure engineering standards and best practices across multiple areas including automation
• Contribute to, and establish a strategic view of risk to our services and iterative and consistent security improvements

Benefits

• 401k
• health_insurance
• dental_insurance
• vision_insurance
• paid_holidays
• paid_volunteer_time
• tuition_reimbursement
• professional_development
• flexible_scheduling
• employee_stock_purchase_plan

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Industry: Publishing Industries
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees