Software Engineer 2 - Microsoft Red Team

Microsoft • Redmond, WA

3d

About The Position

The Microsoft Red Team continually attacks Microsoft services to identify critical systemic risks, demonstrate authentic attack chains and techniques, and help engineering teams, investigators, and incident responders improve their ability to protect, detect, investigate, and respond to real attacks. The Software Engineer 2 supports the critical infrastructure the red team relies on to perform its mission safely and securely. The role builds automation to dynamically create ephemeral attack infrastructure, trustworthy engineering systems for highly sensitive tools, isolated productivity environments, and security policies that enable the team’s work while maintaining a high security bar. The team values thoughtful engineering, strong peer and partner relationships, and focus on meaningful outcomes.

Requirements

• Bachelor's degree in Computer Science or a related technical field and 2+ years of technical engineering experience coding in languages including C, C++, C#, Java, JavaScript, or Python, or equivalent experience.
• Ability to meet Microsoft, customer, and/or government security screening requirements.
• Must pass the Microsoft background check and Microsoft Cloud Background Check upon hire or transfer, and every two years thereafter.
• Must provide proof of citizenship, U.S. permanent residency, or other protected status for eligibility assessment for access to export-controlled information; citizenship will be verified with a valid passport, with other documents accepted for lawful permanent residents, refugees, and asylees where applicable.

Nice To Haves

• Experience with infrastructure as code, configuration management, continuous integration and deployment, and automated provisioning of ephemeral environments.
• Experience applying secure engineering practices to sensitive systems, including threat modeling, identity and access isolation, secrets management, and secure development lifecycle practices.
• Experience collaborating with offensive security teams, security researchers, investigators, or incident responders to translate operational needs into dependable engineering solutions.
• 2–5 years of relevant professional experience as a site reliability engineer, security engineer, or software engineer.
• Experience designing, developing, testing, and maintaining production software or automation in one or more general-purpose programming languages.
• Experience building and operating reliable distributed systems, cloud services, or infrastructure platforms, including monitoring, incident response, and performance troubleshooting.

Responsibilities

• Design, implement, test, deploy, and support reliable software and automation for provisioning and managing attack infrastructure for offensive security teams.
• Engineer and maintain secure software platforms, services, and automation that provide isolated identity and productivity environments for sensitive operations.
• Develop production-quality code using sound engineering practices, including automated testing, code reviews, secure development, observability, documentation, and ongoing operational ownership.
• Establish and apply security hygiene and monitoring policies that meet Microsoft security requirements without preventing offensive operations.
• Support red team operations with infrastructure needs as required.

Benefits

• Certain roles may be eligible for benefits and other compensation; details are available at the linked Microsoft pay and benefits information page.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level