Job Description

Overview

CoreAI is at the forefront of Microsoft’s mission to redefine how software is built and experienced. We are responsible for building the foundational platforms, services, programming models, and developer experiences that power the next generation of applications using Generative AI. Our work enables developers and enterprises to harness the full potential of AI to create intelligent, adaptive, and transformative software.

The 1ES (One Engineering System) team is responsible for enabling the world's best engineering teams with world-class tools and systems that help them ship products their customers love.

Developers need reliable ways to identify, prioritize and remediate security issues across their code and engineering systems. As AI security scanning and AI-assisted triage expand, connecting findings to the right owners and driving remediation through integrated engineering workflows is essential. Ensuring that actionable security findings lead to timely remediation and a great developer experience is paramount to Microsoft’s core mission.

Our team is seeking a Software Engineer 2 - CoreAI who is passionate about security, developer productivity and automation and will contribute to the ongoing growth and support of the engineering system powering Microsoft.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities

• Developing scalable distributed services for security-result ingestion, storage, validation and ownership routing.
• Collaborating with security teams and partners, integrating scanning, triage and automated remediation workflows in our system,
• Building a variety of tools that help Microsoft engineers track and resolve security findings including working on GitHub Advanced Security for Azure DevOps,
• Supporting customers and the production services.
• Works with appropriate stakeholders to determine user requirements for a set of features.
• Contributes to the identification of dependencies, and the development of design documents for a product area with little oversight.
• Creates and implements code for a product, service, or feature, reusing code as applicable.
• Contributes to efforts to break down larger work items into smaller work items and provides estimation.
• Acts as a Designated Responsible Individual (DRI) working on-call to monitor system/product feature/service for degradation, downtime, or interruptions and gains approval to restore system/product/service for simple problems.
• Remains current in skills by investing time and effort into staying abreast of current developments that will improve the availability, reliability, efficiency, observability, and performance of products while also driving consistency in monitoring and operations at scale.

Qualifications

Required/Minimum Qualifications

• Bachelor's Degree in Computer Science or related technical field AND 2+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
• OR equivalent experience.

Other Requirements:

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:

• Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Preferred/Additional Qualifications:

• Bachelor's Degree in Computer Science or related technical field AND 3+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience.
• 1+ year of experience with distributed services and API integrations for developer or security tooling.
• 1+ year of experience with software security, including threat modeling, isolation, integrity checking, and certificates.
• 1+ years of experience with RDBMS and/or NoSql databases.
• Understanding of distributed services, API integrations, security-result formats such as SARIF and best practices for security remediation automation.

Software Engineering IC3 - The typical base pay range for this role across the U.S. is USD $102,100 - $202,200 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $133,800 - $219,200 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:

https://careers.microsoft.com/us/en/us-corporate-pay

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.