Security Engineer

About The Company Microsoft is a global technology leader dedicated to empowering individuals and organizations through innovative software, hardware, and services. Renowned for its commitment to security, privacy, and technological excellence, Microsoft continuously strives to develop cutting-edge solutions that address the evolving needs of its diverse customer base. With a rich history of pioneering advancements in the tech industry, Microsoft fosters a culture of innovation, collaboration, and integrity, aiming to create a safer digital environment for users worldwide. About The Role The Security Engineer II role within the Microsoft Windows Security team offers a unique opportunity for a dedicated security professional to contribute to the safeguarding of Microsoft Windows products and devices. This position is heavily focused on offensive security, security engineering, and the development of mitigations to address vulnerabilities in Windows operating systems. As a hands-on role, it involves performing comprehensive security design reviews, code analysis, penetration testing, and vulnerability research to identify and mitigate security risks proactively. The Security Engineer II will play a critical role in enhancing the security posture of Windows platforms, ensuring they meet the highest security standards and effectively defend against emerging cybersecurity threats. Qualifications The ideal candidate will possess a combination of educational background and practical experience in security or related fields. Required qualifications include a Master’s Degree in Statistics, Mathematics, Computer Science, or a related discipline with at least one year of experience in security, or a Bachelor's Degree with a minimum of two years of relevant security experience. Equivalent experience will also be considered. Candidates must be able to meet Microsoft, customer, and government security screening requirements, including passing the Microsoft Cloud Background Check upon hire and every two years thereafter. Preferred qualifications include over two years of experience in identifying vulnerabilities within operating systems or native applications, more than five years of experience in software or security engineering, and a proven track record of security research, particularly in vulnerability discovery, exploitation, and bypassing security mitigations. Familiarity with Microsoft Windows architecture and experience with C/C++ development are highly valued. Responsibilities The Security Engineer II will be responsible for developing reusable agents and tools designed to streamline and enhance the security review process. This includes reviewing features and code for security flaws and architectural risks using automated tools and custom agents. The role requires acting as the primary security contact for teams developing innovative products and technologies in upcoming Windows versions and devices. The engineer will identify security vulnerabilities across key OS features such as network protocols, security modules, and device functionalities. Leveraging a broad understanding of security principles, the candidate will devise new protections and mitigation strategies to address vulnerabilities. Engagement with the external security community and researchers is essential to stay current on emerging threats and research trends. Collaborating closely with product teams, the engineer will help improve security measures and communicate the strategic value of security investments to stakeholders. Benefits Microsoft offers a comprehensive benefits package designed to support the health, well-being, and professional growth of its employees. This includes competitive compensation, health insurance plans, retirement savings options, and paid time off. Employees also have access to a range of development programs, training resources, and career advancement opportunities. Microsoft fosters a collaborative and inclusive work environment that encourages innovation and work-life balance. Additionally, employees benefit from various wellness initiatives, flexible work arrangements, and access to cutting-edge technology and tools to facilitate their work and personal development. Equal Opportunity Microsoft is committed to creating a diverse and inclusive workplace where all employees are valued and empowered to succeed. We provide equal employment opportunities regardless of race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, or veteran status. Our commitment extends to fostering an environment where everyone can contribute their unique perspectives and talents. We believe that diversity drives innovation and helps us better serve our global community. Microsoft adheres to all applicable laws and regulations related to equal employment opportunity and actively promotes a culture of respect and inclusion.