Job Description

Responsibilities

• Design and implement the validation framework to test and maintain secure-by-design features with automated test coverage, and fuzzing to catch defects early, and balancing security, reliability, performance, compatibility, and secure servicing. Apply secure defaults, hardening baselines, cryptographic standards, key management, auditability and logging in the components you own.
• Build observability pipelines through telemetry insights, security metrics, and health signals needed to measure how well those controls work in production.
• Contribute to threat modeling and security reviews and build mitigations for high-severity threats and systemic classes of vulnerabilities, validating each mitigation with targeted test cases and regression coverage so fixes hold over time.
• Support security incidents and partner with product, support, field, Artificial Intelligence (AI), and security-adjacent teams to assess impact, deliver containment and remediation fixes, use observability and telemetry to detect and diagnose issues, incorporate real-world attack patterns and operational constraints, and land post-incident hardening improvements.

Qualifications

Required Qualifications

• Bachelor's Degree in Computer Science or related technical field AND 4+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C# or Python OR equivalent experience.

Preferred Qualifications

• 6+ years of professional software engineering experience with coding in one or more languages such as C, C++, C#, Python, Rust,, PowerShell or Kusto, including designing automated tests and validation for the software you ship.
• Experience or demonstrated interest in OS fundamentals and/or software and system security.
• Demonstrated experience in confidential computing, using cryptography in a secure way, including sound selection and application of cryptographic primitives, careful key management, and secure protocol design.
• Familiarity with platform security controls such as Secure Boot and Trusted Platform Module (TPM), virtualization-based security (VBS), code integrity, Credential Guard, WDAC/App Control, BitLocker, and Secured-core.
• Understanding of threat modeling and modern attacker techniques (credential theft, lateral movement, privilege escalation, persistence, and supply-chain or build attacks), the corresponding defenses, and how to detect them through security telemetry and observability.

#W+DJOBS

Software Engineering IC4 - The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $160,200 - $261,000 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.