Senior/Principal Software Engineer - Microsoft Red Team
About The Position
Microsoft’s CISO organization focuses on enterprise security strategy, risk posture, and real-world security needs, working with product and engineering teams to align security solutions with customer needs. CyberShield extends Microsoft’s red team capability to select external customers and aims to move red teaming toward a continuous, software-driven model powered by agentic AI. It operates across cloud, identity, network, endpoint, hardware, and operational security domains. The Senior/Principal Security Software Engineer will design and build the offensive platform, tooling, and capabilities used in CyberShield operations. Working with red team operators and security engineers, the role automates adversary tactics, techniques, and procedures and develops capabilities for autonomous reconnaissance, vulnerability discovery, exploitation, and post-exploitation. Focus areas may include exploit development, implant development, and agent platform development. The engineer provides technical leadership across disciplines, mentors engineers, and turns operational lessons and emerging tradecraft into scalable, reliable capabilities for discovering and demonstrating security risk.
Requirements
- Bachelor’s degree in Computer Science or a related technical field and 4+ years of technical engineering experience coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python, or equivalent experience.
- Ability to meet Microsoft, customer, and/or government security screening requirements, including passing the Microsoft Cloud Background Check upon hire or transfer and every two years thereafter.
Nice To Haves
- Master’s degree in Computer Science or a related technical field and 8+ years of technical engineering experience coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python, or equivalent experience.
- Bachelor’s degree in Computer Science or a related technical field and 12+ years of technical engineering experience coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python, or equivalent experience.
- 3+ years of experience performing red team security assessments or working in a red-team-adjacent role.
- 3+ years of experience with cloud technologies such as Azure, AWS, or GCP.
Responsibilities
- Analyze data from Microsoft and customer engagement environments to identify potential security weaknesses and breach points, and partner with operational teams to execute targeted attacks that simulate real-world threat scenarios.
- Design and build offensive tooling, implants, and agent-platform capabilities that automate reconnaissance, vulnerability discovery, exploitation, post-exploitation, and adversary emulation across Microsoft and customer environments.
- Develop tools and techniques to scale and accelerate offensive emulation and vulnerability discovery.
- Analyze simulated adversary tactics and communications, enriching defensive tactics and threat intelligence.
- Advocate for security change by building partnerships and clearly communicating the impact of risks.
- Mentor and guide other Software Engineers as they develop their skills and abilities.
- Operate successfully in uncertain and novel environments and identify unknown risk areas.
Benefits
- Certain roles may be eligible for benefits and other compensation; further benefits and pay information is available at https://careers.microsoft.com/us/en/us-corporate-pay.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
