Senior Software Engineer - MDASH

Microsoft • Redmond, WA

3h

About The Position

The MDASH team is reimagining how organizations identify and remediate vulnerabilities in source code. Using AI agents and models, MDASH analyzes code to determine whether potential vulnerabilities are real and reachable, provides developers with actionable fixes, and helps verify that vulnerabilities have been addressed. The Senior Software Engineer will help build and evolve the MDASH scanning engine to advance agentic code scanning. The role involves designing systems that coordinate AI agents and models to analyze complex codebases, scale across programming languages and frameworks, validate security findings, generate high-quality fixes, and perform reliably and efficiently in production. The engineer will work with security researchers, applied scientists, model teams, and product managers to turn new techniques and evaluation insights into product capabilities.

Microsoft Security works to protect customers and empower users, customers, and developers with simplified end-to-end security solutions. Microsoft employees are expected to bring a growth mindset, innovate, collaborate, and uphold the values of respect, integrity, and accountability while fostering an inclusive culture.

Requirements

• Bachelor's degree in Computer Science or a related technical field and 4+ years of technical engineering experience coding in languages including C, C++, C#, Java, JavaScript, TypeScript, or Python, or equivalent experience.
• Ability to meet Microsoft, customer, and/or government security screening requirements, including passing the Microsoft Cloud Background Check upon hire or transfer and every two years thereafter.

Nice To Haves

• Master's degree in Computer Science or a related technical field and 6+ years of technical engineering experience coding in C, C++, C#, Java, JavaScript, TypeScript, or Python; or a bachelor's degree in Computer Science or a related technical field and 8+ years of such experience; or equivalent experience.
• Experience building production systems with large language models, such as AI agents, multi-agent orchestration, tool calling, planning, context management, or code-understanding systems.
• Experience building or working on security scanners, static analysis (SAST), dynamic analysis (DAST), software composition analysis (SCA), compilers, or other program analysis tools.
• Working knowledge of vulnerability classes such as memory safety, injection, authentication and authorization, deserialization, path traversal, SSRF, and business-logic flaws.
• Experience with program analysis techniques such as taint analysis, data-flow and control-flow analysis, code property graphs, fuzzing, or symbolic execution.
• Experience building distributed, high-scale cloud services on Azure, including containerized or sandboxed execution.
• Familiarity with multiple software ecosystems and build systems across C/C++, C#, Java, JavaScript/TypeScript, Python, and cloud-native applications.
• Passion for developer experience and building tools that engineers trust and act on.

Responsibilities

• Design, build, and evolve the MDASH scanning engine, including agent orchestration, multi-model routing, code understanding, vulnerability detection, reachability validation, and fix generation and verification.
• Extend engine coverage across vulnerability classes, programming languages, frameworks, build systems, and codebase sizes, from individual services to large monorepos.
• Integrate program analysis techniques into agent workflows to make detections more precise and grounded, including static and dynamic analysis, taint tracking, call-graph and data-flow analysis, fuzzing, and sandboxed execution.
• Improve engine precision, recall, consistency, and fix quality using evaluation results, research findings, and production feedback.
• Optimize scan performance, scalability, cost, and latency for enterprise-scale codebases and CI/CD workflows.
• Build a secure, reliable, and observable engine, with strong isolation for running untrusted code and clear telemetry for diagnosing agent behavior.
• Work with security research, applied science, model, and product teams to bring new techniques and models into the engine quickly and safely.
• Track the agentic security and code-scanning landscape and propose ideas to differentiate MDASH from competitors.
• Write high-quality, well-tested code.
• Lead design reviews, participate in code reviews and on-call rotations, and help raise the team's engineering bar.
• Mentor other engineers and model Microsoft values to help build an inclusive environment.

Benefits

• Certain roles may be eligible for benefits and other compensation; additional benefits and pay information is available through Microsoft's careers website.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior