Senior/Principal Software Engineer - Microsoft Red Team

Microsoft•Redmond, WA

About The Position

Microsoft’s CISO organization represents the voice of the customer and executive security buyer, focusing on enterprise security strategy, risk posture, and real-world security needs. CyberShield is Microsoft’s Red Team program that extends red team capabilities beyond Microsoft’s own estate to select external customers. Its goal is to move red teaming from point-in-time, human-led engagements to a continuous, software-driven model powered by agentic AI. Microsoft is hiring Senior and Principal Security Software Engineers to design and build the offensive platform, tooling, and capabilities that power CyberShield operations. Engineers partner with red team operators and security engineers to automate adversary tactics, techniques, and procedures; build capabilities for autonomous reconnaissance, vulnerability discovery, exploitation, and post-exploitation; and turn emerging tradecraft into reliable systems that operate across Microsoft and customer environments. Focus areas may include exploit development, implant development, and agent platform development. The role provides technical leadership across disciplines, mentors other engineers, and translates operational lessons into scalable capabilities that improve how CyberShield discovers and demonstrates security risk. The work spans cloud, identity, network, endpoint, hardware, and operational security domains. The position requires the ability to meet Microsoft, customer, and/or government security screening requirements, including passing the Microsoft Cloud Background Check upon hire or transfer and every two years thereafter.

Requirements

Bachelor’s Degree in Computer Science or a related technical field and 4+ years of technical engineering experience coding in languages including C, C++, C#, Java, JavaScript, or Python, or equivalent experience.
Ability to meet Microsoft, customer, and/or government security screening requirements.
Pass the Microsoft Cloud Background Check upon hire or transfer and every two years thereafter.

Nice To Haves

Master’s Degree in Computer Science or a related technical field and 8+ years of technical engineering experience coding in languages including C, C++, C#, Java, JavaScript, or Python, or equivalent experience.
Bachelor’s Degree in Computer Science or a related technical field and 12+ years of technical engineering experience coding in languages including C, C++, C#, Java, JavaScript, or Python, or equivalent experience.
3+ years of experience performing red team security assessments or working in a red team-adjacent role.
3+ years of experience with cloud technologies such as Azure, AWS, or GCP.

Responsibilities

Analyze data from Microsoft and customer engagement environments to identify potential security weaknesses and breach points, then partner with operational teams to execute targeted attacks that simulate real-world threat scenarios.
Design and build offensive tooling, implants, and agent-platform capabilities that automate reconnaissance, vulnerability discovery, exploitation, post-exploitation, and adversary emulation across Microsoft and customer environments.
Develop tools and techniques to scale and accelerate offensive emulation and vulnerability discovery.
Analyze simulated adversary tactics and communications, enriching defensive tactics and threat intelligence.
Advocate for security change by building partnerships and clearly communicating the impact of risks.
Mentor and guide other Software Engineers as they develop their skills and abilities.
Operate successfully in uncertain and novel environments and identify unknown risk areas.