Security Assurance Intern - CTJ - TS

Microsoft•Redmond, WA

About The Position

Join the Microsoft Specialized Cloud (MSC) team - the next generation of platform and experiences enabling Microsoft and Azure, the fastest-growing cloud platform in the world which makes billions of dollars in revenue. MSC’s teams build and operate products and cloud services used by U.S. government customers at significant scale, solve challenging problems across distributed systems, developer platforms, data, reliability, and product experiences while collaborating with teams across Microsoft to deliver secure, dependable, and innovative technology for our U.S. Government customers and their missions. As a Security Assurance Intern, under supervision, you will analyze, engineer solutions and mitigate security issues through the design, policy, threat modeling, assurance program design, education, thought leadership and facilitation roles around secure software development and operational security assurance. You will support operational security and security incidents as well as security reviews and reporting. You will help plan and support research into security issues and partners across security disciplines to address issues. At Microsoft, Interns work on real-world projects in collaboration with teams across the world, while having fun along the way. You’ll be empowered to build community, explore your passions and achieve your goals. This is your chance to bring your solutions and ideas to life while working on cutting-edge technology. At Microsoft, our mission—to empower every person and every organization on the planet to achieve more—guides how we partner with customers to deliver trusted, impactful solutions. With a growth mindset culture, we innovate responsibly and measure success by shared progress—people, teams, and customers. Join us to do meaningful work that changes the world and helps shape what’s next for everyone.

Requirements

Currently pursuing a Bachelor's Degree with at least one semester/term of school remaining following the completion of the internship.
Candidates must be able to meet Microsoft, customer and/or government security screening requirements are required for this role.
The successful candidate must have an active U.S. Government Top Secret Security Clearance.
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role.
Failure to maintain or obtain the appropriate clearance and/or customer screening requirements may result in employment action up to and including termination.
Clearance Verification: This position requires successful verification of the stated security clearance to meet federal government customer requirements.
You will be asked to provide clearance verification information prior to an offer of employment.
Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.
Citizenship & Citizenship Verification: This position requires verification of U.S. citizenship due to citizenship-based legal restrictions.
Specifically, this position supports United States federal, state, and/or local United States government agency customer and is subject to certain citizenship-based restrictions where required or permitted by applicable law.
To meet this legal requirement, citizenship will be verified via a valid passport, or other approved documents, or verified US government Clearance.

Responsibilities

Analyze threat trends and anomalies to determine operational impact.
Determines vectors that introduce threat and potential mitigation strategies.
Learns about systemic security issues and how to address them.
Understands common deployment scenarios, dependencies, and data flow in overall analysis.
Identify security defects or vulnerabilities and escalates as needed.
Identify deficiencies in security guidance to determine scope of potential impact and identifies relevant parties to involve.
Begin to address security issues with customers and/or partners in a timely manner.
Use appropriate tools to isolate and solve identified issues.
Respond to customer and partner security issues, investigates solutions, coordinates response from appropriate parties and follows up with customers to ensure that issues are resolved.
Escalate issues as needed.
Contribute to analysis report and communicate finding and recommendation to decision makers.
Schedule security analysis including scope, priorities and overall security guarantees of a solution or application.
Adjust plan to respond to findings, schedule and priority changes.
Embody our culture and values.