Microsoft’s Security Engineer role within the Microsoft Red Team (MRT) organization focuses on emulating real-world advanced persistent threats to uncover and validate security weaknesses across multiple domains.
Role Overview
As a Security Engineer (Red Team), you will help verify how effectively Microsoft can detect, investigate, and respond to adversary activity. The work includes end-to-end vulnerability discovery and exploitation across application, cloud, network, hardware, physical, and operational security domains, along with close collaboration with developers and Blue Teams to improve defender readiness.
Key Responsibilities
- Discover and exploit vulnerabilities end-to-end to assess the security of systems and services.
- Contribute to the execution of Red Team operations using real-world adversarial tactics and techniques to validate detection, investigation, and response capabilities.
- Drive security change by building partnerships and clearly communicating the impact of identified risks.
- Present security risks to a broad audience.
- Analyze a wide range of data sources, including source code, to identify potential security weaknesses and breach points within Microsoft’s infrastructure.
- Leverage Artificial Intelligence and agentic approaches to support vulnerability discovery and threat emulation.
- Collaborate with Blue Teams to improve readiness and produce solutions for defenders and customers.
- Analyze simulated adversary tactics and communications to enhance defensive tactics and threat intelligence.
Required Qualifications
- Bachelor’s Degree in Statistics, Mathematics, Computer Science, or a related field OR equivalent experience.
- Ability to meet Microsoft, customer and/or government security screening requirements for the role.
Preferred Qualifications
- Master’s Degree in Statistics, Mathematics, Computer Science, or a related field, OR Bachelor’s Degree in Statistics, Mathematics, Computer Science, or a related field plus 2+ years of experience in security or a related field (or equivalent experience).
- 1+ year(s) of experience in identifying security vulnerabilities, cyber security, or a related security discipline, or in a software engineering-related field.
Additional Requirements
- Microsoft Cloud Background Check: The role requires passing the Microsoft Cloud Background Check upon hire or transfer and again every two years thereafter.
- Citizenship & verification: The position requires access to information controlled for export under export control regulations, potentially including ITAR and/or EAR, EU Dual Use Regulation, and other export control regulations. As a condition of employment, the successful candidate must provide proof of country of citizenship or proof of U.S. permanent residence.
Location and Compensation
Location: Washington, DC (onsite).
Compensation: USD 85,400 - 183,700 per year.
Education
A Bachelor’s Degree in Statistics, Mathematics, Computer Science, or a related field is required.
