Software Engineer II

Microsoft • Redmond, WA

1d • $102,100 - $219,200

About The Position

Microsoft Security is working to help protect customers from digital threats through simplified, end-to-end security solutions. The MDASH team is reimagining how organizations identify and remediate source-code vulnerabilities. Its AI agents and models analyze code to determine whether potential vulnerabilities are real and reachable, provide actionable fixes, and help verify that vulnerabilities have been addressed.

The Software Engineer II will help build and evolve the MDASH scanning engine and advance agentic code scanning. The role involves designing systems that coordinate AI agents and models to analyze complex codebases, expand support across programming languages and frameworks, validate findings, generate high-quality fixes, and deliver reliable, efficient performance in production. The engineer will collaborate with security researchers, applied scientists, model teams, and product managers to turn new techniques and evaluation insights into product capabilities.

Microsoft emphasizes a growth mindset, innovation, collaboration, respect, integrity, accountability, and an inclusive culture.

Requirements

• Bachelor's degree in Computer Science or a related technical field and 2 or more years of technical engineering experience coding in languages including C, C++, C#, Java, JavaScript, TypeScript, or Python, or equivalent experience.
• Ability to meet Microsoft, customer, and/or government security screening requirements, including passing the Microsoft Cloud Background Check upon hire or transfer and every two years thereafter.

Nice To Haves

• Master's degree in Computer Science or a related technical field and 3 or more years of technical engineering experience coding in languages including C, C++, C#, Java, JavaScript, TypeScript, or Python, or equivalent experience.
• Bachelor's degree in Computer Science or a related technical field and 5 or more years of technical engineering experience coding in languages including C, C++, C#, Java, JavaScript, TypeScript, or Python, or equivalent experience.
• Experience building production systems with large language models, such as AI agents, multi-agent orchestration, tool calling, planning, context management, or code-understanding systems.
• Experience building distributed, high-scale cloud services on Azure, including containerized or sandboxed execution.
• Familiarity with multiple software ecosystems and build systems across C/C++, C#, Java, JavaScript/TypeScript, Python, and cloud-native applications.

Responsibilities

• Design, build, and evolve the MDASH scanning engine, including agent orchestration, multi-model routing, code understanding, vulnerability detection, reachability validation, and fix generation and verification.
• Extend engine coverage across vulnerability classes, programming languages, frameworks, build systems, and codebase sizes, from single services to large monorepos.
• Integrate program analysis techniques into agent workflows, including static and dynamic analysis, taint tracking, call-graph and data-flow analysis, fuzzing, and sandboxed execution.
• Improve precision, recall, consistency, and fix quality using evaluation results, research findings, and production feedback.
• Optimize scan performance, scalability, cost, and latency for enterprise-scale codebases and CI/CD workflows.
• Build a secure, reliable, observable engine, including strong isolation for running untrusted code and clear telemetry for diagnosing agent behavior.
• Work with security research, applied science, model, and product teams to bring new techniques and models into the engine quickly and safely.
• Track the agentic security and code-scanning landscape and propose ideas that distinguish MDASH from competitors.
• Write high-quality, well-tested code; lead design reviews; participate in code reviews and on-call rotations; and help raise the engineering bar for the team.

Benefits

• Certain roles may be eligible for benefits and other compensation; additional benefits and pay information is available through the linked Microsoft careers page.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level