Software Engineer 2 - Microsoft Red Team
About The Position
The Microsoft Red Team continually attacks Microsoft services to identify systemic risks, demonstrate authentic attack chains and techniques, and help engineering teams, investigators, and incident responders improve their ability to protect, detect, investigate, and respond to real attacks. The Software Engineer 2 helps manage the critical infrastructure the Red Team relies on, doing so safely and securely. The role builds automation to dynamically create ephemeral attack infrastructure, trustworthy engineering systems for sensitive tools, isolated productivity environments, and security policies that support Red Team operations while maintaining a high security bar. The engineer designs, implements, tests, deploys, and supports reliable software and automation for offensive security infrastructure. They develop and maintain secure platforms, services, and automation for isolated identity and productivity environments, and take ongoing operational ownership of production-quality software. The role also establishes and applies security hygiene and monitoring policies that meet Microsoft security requirements without preventing offensive operations, and supports Red Team operations with infrastructure needs as required.
Requirements
- Bachelor’s degree in Computer Science or a related technical field and 2+ years of technical engineering experience coding in languages such as C, C++, C#, Java, JavaScript, or Python, or equivalent experience.
- Ability to meet Microsoft, customer, and/or government security screening requirements.
- Must pass the Microsoft background and Microsoft Cloud background check upon hire or transfer and every two years thereafter.
- Must provide proof of citizenship, U.S. permanent residency, or other protected status for assessment of eligibility to access export-controlled information; citizenship will be verified with a valid passport, with alternative documents applicable for lawful permanent residents, refugees, and asylees.
Nice To Haves
- Experience with infrastructure as code, configuration management, continuous integration and deployment, and automated provisioning of ephemeral environments.
- Experience applying secure engineering practices to sensitive systems, including threat modeling, identity and access isolation, secrets management, and secure development lifecycle practices.
- Experience collaborating with offensive security teams, security researchers, investigators, or incident responders to translate operational needs into dependable engineering solutions.
- 2–5 years of relevant professional experience as a site reliability engineer, security engineer, or software engineer.
- Experience designing, developing, testing, and maintaining production software or automation in one or more general-purpose programming languages.
- Experience building and operating reliable distributed systems, cloud services, or infrastructure platforms, including monitoring, incident response, and performance troubleshooting.
Responsibilities
- Design, implement, test, deploy, and support reliable software and automation for provisioning and managing attack infrastructure for offensive security teams.
- Engineer and maintain secure software platforms, services, and automation that provide isolated identity and productivity environments for sensitive operations.
- Develop production-quality code using sound engineering practices, including automated testing, code reviews, secure development, observability, documentation, and ongoing operational ownership.
- Establish and apply security hygiene and monitoring policies that meet Microsoft security requirements without preventing offensive operations.
- Support Red Team operations with infrastructure needs as required.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
