Security Engineer II - Red Team
About The Position
The Security Engineer II will work in Microsoft’s Red Team organization, emulating real-world advanced persistent threats against Microsoft, with a focus on identifying, exploiting, and emulating threats against Azure. The role helps assess and strengthen the security and resilience of Microsoft’s cloud platform by exploring ways to identify and prevent security flaws. The engineer will execute red team operations and collaborate with experienced red teamers, developers, and security personnel across Microsoft. The work covers vulnerabilities across application, cloud, network, hardware, and operational security domains. The role also uses artificial intelligence and agentic approaches for vulnerability discovery and threat emulation, and provides defenders with insights to improve detection, investigation, response, and customer security.
Requirements
- Master’s degree in Statistics, Mathematics, Computer Science, or a related field and at least 1 year of experience in security or a related field; or bachelor’s degree in one of those fields and at least 2 years of relevant experience; or equivalent experience.
- Ability to meet Microsoft, customer, and/or government security screening requirements, including passing the Microsoft Cloud Background Check upon hire or transfer and every two years thereafter.
Nice To Haves
- At least 3 years of experience identifying security vulnerabilities, in cybersecurity or a related security discipline, or in a software engineering-related field.
Responsibilities
- Discover and exploit vulnerabilities end-to-end to assess the security of services.
- Contribute to Red Team operations using real-world adversarial tactics and techniques to validate production services’ ability to detect, investigate, and respond.
- Advocate for security change across the company by building partnerships and clearly communicating the impact of risks.
- Analyze data sources, including source code, to identify potential security weaknesses and breach points within Microsoft’s infrastructure.
- Collaborate with Blue Teams to improve readiness and develop solutions for defenders and customers.
- Analyze simulated adversary tactics and communications to enrich response tactics and threat intelligence.
- Use artificial intelligence and agentic approaches for vulnerability discovery and threat emulation.
- Embody Microsoft’s culture and values.
Benefits
- Certain roles may be eligible for benefits and other compensation; additional benefits and pay information is available through Microsoft Careers.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
