OverviewThe Microsoft Windows Security team is looking for a Principal Security Engineer to help secure Windows products and devices through offensive security, vulnerability research, and the development of scalable security mitigations.
The Windows Security team helps protect Windows client and server operating systems used by customers and businesses worldwide. The team performs security design and code reviews, penetration testing, and vulnerability research while developing defenses that strengthen Windows against evolving cybersecurity threats.
In this role, you will identify and investigate complex security vulnerabilities and novel attack vectors across Windows, develop proof-of-concept exploits, and design durable mitigations for individual vulnerabilities and broader classes of security issues. You will apply deep knowledge of native code, operating system security, vulnerability research, and offensive security techniques while partnering with Windows engineering teams to incorporate security into product architecture and design.
Responsibilities- Conduct vulnerability research and offensive security assessments across Windows, using techniques such as code auditing, fuzzing, penetration testing, and exploitation to identify vulnerabilities and no
- complex security risks, and develop durable defenses.
- Engage with internal and external security communities to understand emerging vulnerabilities, attack techniques, and opportunities to strengthen Windows securityvel attack vectors.
- Review product architecture, features, and native code to identify security vulnerabilities and architectural risks using manual and automated security analysis techniques.
- Develop proof-of-concept exploits and scalable mitigations that address identified vulnerabilities and broader classes of security issues.
- Design and build reusable security tools and automation that improve the efficiency, consistency, and quality of security reviews and vulnerability discovery.
- Partner with Windows product engineering teams to incorporate security into product design, resolve
QualificationsRequired/minimum qualifications- Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in security or related field OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in security or related field OR equivalent experience.
- Hands-on experience with offensive security techniques such as penetration testing, vulnerability research, exploit development, or bypassing operating-system security mitigations
- Experience identifying vulnerabilities in operating systems and/or native (C/C++) applications.
Additional or preferred qualifications- Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 6+ years experience in security or related field OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 8+ years experience in security or related field OR equivalent experience.
- 5+ years of experience in software engineering, security engineering, or a related technical field.
- Demonstrated experience in security research, particularly vulnerability discovery.
- Experience exploiting vulnerabilities and bypassing security mitigations in operating systems.
- Familiarity with Microsoft Windows architecture and operating system internals.
Penetration Testing IC5 - The typical base pay range for this role across Canada is CAD $142,400 - CAD $257,500 per year.
Find additional pay information here:
https://careers.microsoft.com/v2/global/en/canada-pay-information.html
Penetration Testing IC5 - L'échelle salariale de base typique pour ce rôle dans l'ensemble du Canada est de 142,400 $ CAD à 257,500 $ CAD par année.
Pour plus d'information au sujet de la rémunération, veuillez cliquer ici:
https://careers.microsoft.com/v2/global/en/canada-pay-information.html
Ce poste sera ouvert pendant au moins cinq jours et les candidatures seront acceptées de façon continue jusqu'à ce que le poste soit pourvu.
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
