Security Engineer

Identity Security (IDSEC) Breach Preventions at Microsoft focuses on stopping repeat security incidents across Microsoft Identity and Network Access services. This onsite role in Redmond, WA combines scalable engineering controls with automation, turning breach and threat intelligence into production-ready countermeasures designed to improve reliability while strengthening defenses across the identity fleet.

Salary range: USD 102,100 - 219,200 per year. U.S. base pay range: USD 102,100 - 202,200 per year. Location-adjusted base pay: within the San Francisco Bay area and New York City metro, USD 133,800 - 219,200 per year.

What you’ll do

• Translate breach learnings and threat actor behaviors into deterministic engineering controls that prevent recurrence across multiple services.
• Design platform-level enforcement mechanisms that remove whole classes of vulnerabilities without relying on service-by-service remediation.
• Build reusable prevention frameworks and define paved-path security standards for consistent adoption.
• Partner with engineering teams to integrate preventative controls into production environments while maintaining service reliability.
• Enable rapid rollout of security countermeasures across Microsoft’s identity fleet to address emerging threats proactively.

What you bring

• Master’s degree in Statistics, Mathematics, Computer Science, Computer Security, or a related field, and 1+ year(s) experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
• OR Bachelor’s degree in the same fields, and 2+ years in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
• OR equivalent experience.
• Ability to meet Microsoft, customer and/or government security screening requirements, including the Microsoft Cloud Background Check.
• Pass the Microsoft background check and Microsoft Cloud background check upon hire/transfer and every two years thereafter.
• Additional education/experience pathways include Doctorate in the listed fields, or Master’s with 3+ years experience, or Bachelor’s with 5+ years experience in the areas listed above.
• 3+ years experience in Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response.
• Understanding of identity and access technologies, including OAuth, OIDC, SAML, tokens, certificates/PKI, and MFA.

Technologies

• OAuth
• OIDC
• SAML
• SIEM
• PKI
• MFA