Senior Software Engineer - MDASH
About The Position
The Senior Software Engineer will help build and evolve Microsoft Security’s MDASH scanning engine, which uses AI agents and models to identify and remediate vulnerabilities in source code. The role involves designing systems that coordinate agents and models to analyze complex codebases, determine whether potential vulnerabilities are real and reachable, generate actionable fixes, and verify that vulnerabilities have been addressed. The engine is intended to work across programming languages and frameworks and operate reliably and efficiently in production, including on enterprise-scale codebases and in CI/CD workflows. The engineer will collaborate with security researchers, applied scientists, model teams, and product managers to turn new techniques and evaluation insights into product capabilities. The role calls for experience building complex, large-scale systems, foundational application security knowledge, and an interest in applying AI to software security. Responsibilities also include writing and reviewing code, participating in on-call rotations and design reviews, mentoring engineers, and contributing to an inclusive team environment.
Requirements
- Bachelor’s degree in Computer Science or a related technical field and 4+ years of technical engineering experience coding in languages including C, C++, C#, Java, JavaScript, TypeScript, or Python, or equivalent experience.
- Ability to meet Microsoft, customer, and/or government security screening requirements, including passing the Microsoft Cloud Background Check upon hire or transfer and every two years thereafter.
Nice To Haves
- Master’s degree in Computer Science or a related technical field and 6+ years of technical engineering experience coding in the listed languages, or a bachelor’s degree in a related field and 8+ years of such experience, or equivalent experience.
- Experience building production systems with large language models, such as AI agents, multi-agent orchestration, tool calling, planning, context management, or code-understanding systems.
- Experience building or working on security scanners, static analysis (SAST), dynamic analysis (DAST), software composition analysis (SCA), compilers, or other program analysis tools.
- Working knowledge of vulnerability classes such as memory safety, injection, authentication and authorization, deserialization, path traversal, SSRF, and business-logic flaws.
- Experience with program analysis techniques such as taint analysis, data-flow and control-flow analysis, code property graphs, fuzzing, or symbolic execution.
- Experience building distributed, high-scale cloud services on Azure, including containerized or sandboxed execution.
- Familiarity with multiple software ecosystems and build systems across C/C++, C#, Java, JavaScript/TypeScript, Python, and cloud-native applications.
- Passion for developer experience and building tools that engineers trust and act on.
Responsibilities
- Design, build, and evolve the MDASH scanning engine, including agent orchestration, multi-model routing, code understanding, vulnerability detection, reachability validation, and fix generation and verification.
- Extend engine coverage across vulnerability classes, programming languages, frameworks, build systems, and codebase sizes, from single services to large monorepos.
- Integrate program analysis techniques into agent workflows, including static and dynamic analysis, taint tracking, call-graph and data-flow analysis, fuzzing, and sandboxed execution.
- Improve precision, recall, consistency, and fix quality using evaluation results, research findings, and production feedback.
- Optimize scan performance, scalability, cost, and latency for enterprise-scale codebases and CI/CD workflows.
- Build a secure, reliable, observable engine, with strong isolation for running untrusted code and clear telemetry for diagnosing agent behavior.
- Work with security research, applied science, model, and product teams to bring new techniques and models into the engine quickly and safely.
- Track the agentic security and code-scanning landscape and propose ideas to differentiate MDASH from competitors.
- Write high-quality, well-tested code; lead design reviews; participate in code reviews and on-call rotations; and help raise the engineering bar for the team.
- Mentor other engineers and model Microsoft values to help build an inclusive environment.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
