Jobs
>
Redmond

    Senior Security Engineer - Redmond, United States - Microsoft Corporation

    Microsoft Corporation
    Microsoft Corporation Redmond, United States

    1 week ago

    Default job background
    Description
    Microsoft

    Every company has a mission. What's ours? To empower every person and every organization to achieve more.

    We believe technology can and should be a force for good and that meaningful innovation contributes to a brighter world in the future and today.

    View company page

    Microsoft is a company where passionate innovators come to collaborate, envision what can be and take their careers further.

    This is a world of more possibilities, more innovation, more openness, and the sky is the limit thinking in a cloud -enabled world.


    Microsoft's Azure Data engineering team is leading the transformation of analytics in the world of data with products like databases, data integration, big data analytics, messaging & real-time analytics, and business intelligence.

    The products our portfolio include Microsoft Fabric, Azure SQL DB, Azure Cosmos DB, Azure PostgreSQL, Azure Data Factory, Azure Synapse Analytics, Azure Service Bus, Azure Event Grid, and Power BI.

    Our mission is tobuild the data platform for the age of AI, powering a new class of data-first applications and driving a data culture.

    Within Azure Data, the databases team builds and maintains Microsoft's operational Database systems. We store and manage data in a structured way to enable multitude of applications across various industries.

    We are on a journey to enable developer friendly, mission-critical, AI enabled operational Databases across relational, non-relational and Open Source Software offerings.

    Microsoft's Azure Data databases Red team is hiring a

    Senior Security Engineer .

    Our team utilizes a variety of offensive security techniques to continuously evaluate and enhance the security posture of the organization and its offerings.

    We are dedicated to maintaining customer trust by staying one step ahead of the external attacker. We participate in both pre-release and post-release activities, conducting security reviews, penetration tests, and other ethical hacking exercises. Our team is highly collaborative. We partner with a corresponding blue team to improve monitoring and detection in the classic attack/defend paradigm. We partner with the databases' product teams to drive security improvements in their products and processes.

    We even partner outside of our organization with other red teams across the company to identify systemic risks and share knowledge of attacks and techniques.

    As a Senior Security Engineer, you will be at the forefront of such engagements and collaborations.
    We do not just value differences or different perspectives.

    We seek them out and invite them in so we can tap into the collective power of everyone in the company.

    As a result, our customers are better served.
    Microsoft's mission is to empower every person and every organization on the planet to achieve more.

    As employees we come together with a growth mindset, innovate to empower others and collaborate to realize our shared goals.

    Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

    Responsibilities

    Security Assurance
    Understand current security trends and vulnerabilities.

    Participate in security design reviews and threat model reviews prior to the release of new products or features, communicating clearly the different security options and tradeoffs.

    Deliver broadly available security trainings based on learnings from previous exercises or incidents.
    Penetration testing
    Ramp up and understand new designs, systems, and technology as they are built.
    Participate in comprehensive assessments of features and large-scale applications and environments. This includes mapping out the surface area and assessing prioritization based on time, resource, and general importance tradeoffs.

    Find vulnerabilities in various spaces such as web applications, native applications, database systems, authentication flows, distributed systems and designs, and protocols.

    Pulling from a flexible knowledgebase of topics such as Open Web Application Security Project , memory corruption, privilege escalation, networking, and etc to find both common and uncommon issues.

    Red teaming

    Participate in targeted campaigns (planning, scoping, approval, reconnaissance & discovery, execution of attacks, pivoting, persistence, and remediation) against both pre-production and production environments.

    Navigate through an ecosystem of multiple domains, technologies, protocols, and stakeholders.
    5+ years experience in identifying security vulnerabilities, software development lifecycle, large-scale computing, modeling, cyber security, and anomaly detection.
    Other Requirements
    Ability to meet Microsoft, customer and/or government security screening requirements are required for this role.

    These requirements include, but are not limited to the following specialized security screenings:

    Microsoft Cloud Background Check:
    This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

    Preferred/Additional Qualifications
    6+ years experience in identifying security vulnerabilities, software development
    lifecycle, large-scale computing, modeling, cyber security, and anomaly detection

    OR Master's Degree in Cybersecurity, Computer Science or related field.

    Candidate should posses integrity, ingenuity, results-orientation, self-motivation, and resourcefulness in a fast-paced competitive environment.
    Ability to work collaboratively, solve problems with groups, find win/win solutions and celebrate successes.
    Fundamental understanding of security knowledge around native applications, web applications, distributed and database systems.
    Understanding of security issues for large scale cloud services and network infrastructures

    Possess a vast understanding of security vulnerabilities and attacks (Hardware, Firmware, Software, Network, and People), and the ability to understand new ones based on new technology being developed.

    Penetration Testing IC- The typical base pay range for this role across the U.S. is USD $112,000 - $218,400 per year.

    There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $145,800 - $238,600 per year.

    Certain roles may be eligible for benefits and other compensation.

    Find additional benefits and pay information here:


    Microsoft will accept applications for the role until May 14, 2024.

    Microsoft is an equal opportunity employer.

    All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances.

    We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.

    If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a requestvia the Accommodation request form .

    Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.

    #azdat
    Explore more InfoSec / Cybersecurity career opportunities


    Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.

    #J-18808-Ljbffr
  • Nintendo

    Security Engineer

    2 weeks ago

    Nintendo Redmond, United States

    · Nintendo of America Inc. · The worldwide pioneer in the creation of interactive entertainment, Nintendo Co., Ltd., of Kyoto, Japan, manufactures and markets hardware and software for its Nintendo Switch system and the Nintendo 3DS family of portable systems. Since 1983, when i ...

  • Space Exploration Technologies Corp.

    Security Engineer II

    2 weeks ago

    Space Exploration Technologies Corp. Redmond, United States

    SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars. ...

  • Space Exploration Technologies Corp.

    Sr. Security Engineer

    2 weeks ago

    Space Exploration Technologies Corp. Redmond, United States

    SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars. ...

  • Microsoft Corporation

    Senior Security Engineer

    2 weeks ago

    Microsoft Corporation Redmond, United States

    343 Industries is the developer of the blockbuster Halo series of video games. As part of Xbox Game Studios, the Halo franchise encompasses games, television series, novels, comics, licensed collectibles, apparel and more. We are looking for new Spartans to join our team to build ...

  • Experis

    Senior Security Engineer

    2 weeks ago

    Experis Redmond, United States

    Senior Security Engineer Software Development Engineer 5 · 6 – 18 Months · Pay Range: $65/hr. - $70/hr. · Remote · Our client is looking for Senior Security Engineer. In this role, you will leverage your technical expertise to lead efforts that bring alignment on · standards, pr ...

  • Microsoft Corporation

    Principal Security Engineer

    1 week ago

    Microsoft Corporation Redmond, United States

    Microsoft · Every company has a mission. What's ours? To empower every person and every organization to achieve more. We believe technology can and should be a force for good and that meaningful innovation contributes to a brighter world in the future and today. · View company ...

  • Microsoft Corporation

    Security Engineer II

    2 weeks ago

    Microsoft Corporation Redmond, United States

    Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, an ...

  • Microsoft Corporation

    Security Engineer II

    2 weeks ago

    Microsoft Corporation Redmond, United States

    Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, an ...

  • Nintendo

    Security Engineer

    1 week ago

    Nintendo Kirkland, United States

    Nintendo of America Inc. The worldwide pioneer in the creation of interactive entertainment, Nintendo Co., Ltd., of Kyoto, Japan, manufactures and markets hardware and software for its Nintendo Switch system and the Nintendo 3DS family of portable systems. Since 1983, when it lau ...

  • Microsoft

    Senior Security Engineer

    2 weeks ago

    Microsoft Redmond, WA, United States

    Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, an ...

  • Microsoft

    Principal Security Engineer

    1 week ago

    Microsoft Redmond, United States Full time

    Overview · Security represents the most critical priority for customers in a world awash in digital threats, regulatory scrutiny, and technical complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, cus ...

  • Trick Dog Technology

    Physical Security Engineer

    3 days ago

    Trick Dog Technology Redmond, United States

    Job Responsibilities:Runs and installs wire, read blueprints, mount system panels and devices, and wire circuit and electrical connections for access control, Video Surveillance, and detection systems · Verifies security system /equipment functionality by testing equipment, conn ...

  • Microsoft

    Security Software Engineer II

    3 days ago

    Microsoft Redmond, WA, United States

    Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, an ...

  • Space Exploration Technologies Corp.

    Sr. Security Software Engineer

    1 week ago

    Space Exploration Technologies Corp. Redmond, United States

    SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars. ...

  • Centific

    Application Security Engineer II

    2 weeks ago

    Centific Redmond, United States

    About Centific– · Centific is a global organization with offices in the US, Europe, India, and Asia-Pacific. Clients include 100+ of the Global 500 companies, with industry concentration in Software and Technology, CPG, Retail, Logistics, Financial Services, Insurance, Healthcare ...

  • Space Exploration Technologies Corp.

    Principal Security Software Engineer

    1 week ago

    Space Exploration Technologies Corp. Redmond, United States

    SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars. ...

  • Microsoft Corporation

    Senior Security Software Engineer

    1 week ago

    Microsoft Corporation Redmond, United States

    Microsoft Azure is at the center of Microsoft's cloud services strategy. Azure brings together virtualization, compute, storage, authentication, authorization, media and more to enable anyone to bring their business to the cloud. The Azure Security Engineering organization focuse ...

  • Microsoft Corporation

    Principal Security Assurance Engineer

    1 week ago

    Microsoft Corporation Redmond, United States

    Microsoft's Azure Security organization delivers industrial control systems (ICS) and Operational Technology (OT) cybersecurity assurance programs for Microsoft's global datacenter portfolio by securing critical infrastructure systems used for electrical power, building automatio ...

  • Microsoft Corporation

    Security Operations Engineer II

    2 weeks ago

    Microsoft Corporation Redmond, United States

    Microsofts Edge and Platform Security Fundamentals (EPSF) team is responsible for securing some of Microsofts largest and most critical online services in Azure and Windows + Devices. We are a part of Azure Edge + Platform (E+P), a globally distributed team responsible for the pl ...

  • Microsoft Corporation

    Principal Security Assurance Engineer

    2 weeks ago

    Microsoft Corporation Redmond, United States

    Microsoft's Azure Security organization delivers industrial control systems (ICS) and Operational Technology (OT) cybersecurity assurance programs for Microsoft's global datacenter portfolio by securing critical infrastructure systems used for electrical power, building automatio ...