We’re looking for an experienced and driven Senior Security Engineer to join our STORM security research group and help shape the security posture of Microsoft Specialized Cloud systems from the ground up.
As part of our mission to embed security throughout the development lifecycle, you’ll lead security design reviews, threat modeling, and architectural security assessments across a wide range of technologies, from OS internals and virtualization to cloud platforms, containerized environments, application security, and AI-enabled systems.
This role combines deep security engineering and architecture expertise with a forward-looking approach to AI-assisted security engineering. You’ll be expected to reason deeply about complex systems and review designs hands-on, while also using and building AI-powered capabilities that make security analysis more effective, scalable, and repeatable.
This is a high-impact role for security engineers who thrive on technical depth, enjoy building, and want to influence secure design at scale.
Responsibilities
🔍 What You’ll Do
Lead security design and architecture reviews and structured threat modeling engagements for complex systems.
Analyze systems and architectures to identify trust-boundary violations, architectural vulnerabilities, unsafe assumptions, and opportunities for security-driven redesign.
Partner closely with engineering and security teams to influence architecture early in the product lifecycle and guide teams toward secure design patterns.
Perform security analysis using a combination of deep manual investigation and AI-augmented workflows, applying engineering judgment to validate findings and challenge assumptions.
Design, prototype, and build AI-assisted security capabilities that augment design review, threat modeling, architecture analysis, vulnerability discovery, and other security engineering workflows.
Experiment with new approaches for combining security expertise, automation, and AI to improve the scale, depth, and consistency of security reviews.
Communicate security findings, design tradeoffs, and recommended mitigations clearly to both technical and non-technical stakeholders.
Drive security hardening and security-driven redesign efforts that address systemic weaknesses rather than individual vulnerabilities.
Help evolve our security engineering methodology, tooling, and practices as AI changes how both products and security analysis are built.
Qualifications
Strong experience in security engineering, security architecture, or related technical security roles.
Deep technical knowledge in one or more of the following areas:
Operating system internals, including Windows/Linux, memory management, boot security, or platform security.
Virtualization, confidential computing, cloud architecture, or container security.
Containerized environments incl. Kubernetes and AKS
Application security and secure software development across services, APIs, and distributed systems.
Cloud-native security, including identity, secrets management, isolation, and service-to-service trust.
Experience building with modern AI technologies to solve real engineering or security problems and designing workflows where AI augments expert analysis
🌟 Preferred Qualifications
Expertise in structured threat modeling, architectural risk analysis, and reasoning about complex systems and trust boundaries.
Ability to prototype and build tools rather than only consume existing security tooling.
Experience integrating LLMs or AI agents with existing engineering workflows, tools, data sources, or analysis pipelines.
Experience applying AI to security problems such as threat modeling, design analysis, code analysis, vulnerability discovery, or security automation.
Understanding of security challenges introduced by AI-enabled systems and the ability to threat-model systems incorporating AI components.
Experience with scalable security analysis techniques, including static analysis, dynamic analysis, code analysis, or custom security automation.
Prior expertise and experience with Azure-based solutions and services
Strong understanding of secure coding and code review principles.
🤝 Leadership & CollaborationStrong sense of ownership and responsibility.
Excellent communication skills, with the ability to articulate complex security issues and design tradeoffs clearly and persuasively.
Proven ability to lead cross-functional technical engagements and influence engineering teams without direct authority.
Analytical and curious mindset with a strong drive to understand how systems actually work.
Comfortable navigating ambiguity and working on problems where neither the security answer nor the engineering solution is predetermined.
Builder mindset: willing to experiment, prototype, iterate, and turn promising ideas into capabilities that other security engineers can use.
📈 Experience & Impact6+ years of experience in security engineering, architecture, software engineering, or related roles.
Demonstrated success leading security design reviews, threat modeling, or architectural security assessments for complex systems.
Track record of identifying and helping mitigate significant architectural or system-level security weaknesses.
Experience influencing engineering decisions and driving security improvements across organizational boundaries.
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.
Skills Required
- Strong experience in security engineering, security architecture, or related technical security roles
- Deep technical knowledge in operating system internals, virtualization, confidential computing, cloud architecture, container security, application security, or cloud-native security
- Experience with containerized environments, including Kubernetes and AKS
- Experience building with modern AI technologies to solve engineering or security problems
- Experience designing workflows where AI augments expert analysis
- 6+ years of experience in security engineering, architecture, software engineering, or related roles
- Demonstrated success leading security design reviews, threat modeling, or architectural security assessments for complex systems
- Track record of identifying and helping mitigate significant architectural or system-level security weaknesses
- Experience influencing engineering decisions and driving security improvements across organizational boundaries
- Expertise in structured threat modeling, architectural risk analysis, and complex systems
- Ability to prototype and build security tools
- Experience integrating LLMs or AI agents with engineering workflows, tools, data sources, or analysis pipelines
- Experience applying AI to threat modeling, design analysis, code analysis, vulnerability discovery, or security automation
- Understanding of security challenges in AI-enabled systems
- Experience with static analysis, dynamic analysis, code analysis, or custom security automation
- Prior expertise with Azure-based solutions and services
- Strong understanding of secure coding and code review principles
- Excellent communication skills and ability to explain complex security issues and design tradeoffs
- Ability to lead cross-functional technical engagements and influence teams without direct authority
Microsoft Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Microsoft and has not been reviewed or approved by Microsoft.
-
Fair & Transparent Compensation — Pay is presented as broadly competitive overall, with clear role/level/location variation and an emphasis on using posted ranges and band information for apples-to-apples comparisons.
-
Retirement Support — Retirement benefits are described as a standout, highlighted by a strong 401(k) match structure and immediate vesting, plus additional plan features for tax-advantaged saving.
-
Parental & Family Support — Family-oriented benefits are portrayed as a meaningful strength, with substantial paid parental leave and added supports like back-up care and adoption/surrogacy assistance.
Microsoft Insights
What We Do
At Microsoft, our mission is to empower every person and every organization on the planet to achieve more. Our mission is grounded in both the world in which we live and the future we strive to create. Today, we live in a mobile-first, cloud-first world, and the transformation we are driving across our businesses is designed to enable Microsoft and our customers to thrive in this world.
