Senior Security Engineer - Edge Browser

Microsoft

53d • Hybrid

About The Position

The Microsoft Edge Browser Security Team is responsible for securing Edge client code. Our work broadly fits into three distinct categories: Engagement, Proactive, and Reactive security. We work closely with developers, engaging with them to ensure principals such as defence in depth and secure by default are architected into everything we do. Additionally, we perform proactive vulnerability research and analysis at scale to highlight high risk attack surfaces and identify security bugs before hackers do. Finally, we ensure that our reactive response flows are monitored and maintained, tracking reports from external finders, and working with threat intelligence teams to stop active threats to our customers. Throughout all of this, you will work with our industry partners to contribute security improvements to the Chromium project to make the web safer for everyone.
As a Senior Security Engineer in Edge Browser, you will be expected to have knowledge and experience of cybersecurity principals. Ideal candidates will have or quickly obtain a technical knowledge of code audit, fuzzer development, crash analysis and web security. Successful candidates will demonstrate the ability to adopt an adversarial mindset, finding creative ways to break assumptions, identify gaps, and bypass security functions. It is highly beneficial to also have a deep understanding of security fundamentals, computer science skills, and a passion for keeping Microsoft’s customers safe.
Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
Starting January 26, 2026, Microsoft AI (MAI) employees who live within a 50- mile commute of a designated Microsoft office in the U.S. or 25-mile commute of a non-U.S., country-specific location are expected to work from the office at least four days per week. This expectation is subject to local law and may vary by jurisdiction.

Requirements

• Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
• OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR equivalent experience.

Nice To Haves

• Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
• OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 6+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
• OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 8+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection
• OR equivalent experience.
• Experience with relevant security research along with relevant CVEs (if available) ideally in browser vulnerability discovery.
• Experience with writing basic exploits for native or web applications.
• Development and deployment of fuzz testing and/or static analysis software.

Responsibilities

• Analyse complex issues using multiple data sources to develop insights and identify security problems and threats.
• Identify and perform research on critical security areas, collaborate across teams, design preventive solutions, and escalate impactful findings appropriately.
• Be able to help plan and execute strategies for growing Edge’s capabilities. Drive initiatives to identify and mitigate security risk for our customers.
• Oversee our security response work, acting on reports from vulnerability researchers.
• Monitor and alert the security health of Edge and plan remedial actions.
• Collaborate with other security teams across Microsoft to design and develop new security mitigations and defences.
• Work closely with our partners in the Chromium community to improve browser security.
• Leverage curiosity and learn new skills to operate in a fast-paced and ever-changing environment.
• Interact with the external security community, researchers and security conference presenters.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Ph.D. or professional degree