The Principal Security Engineer will be a key operator in the CyberShield program within Microsoft's Red Team organization, focusing on adversary emulation operations. This role involves planning and executing red team operations against both Microsoft's and select external customer environments. The engineer will lead AI-driven red team operations, designing and directing autonomous agents to identify and exploit vulnerabilities. The position requires collaboration with various teams to enhance security measures and mentor other operators.

• Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in security or related field OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 6+ years experience in security or related field OR equivalent experience.
• Ability to meet Microsoft, customer and/or government security screening requirements.
• 6+ years of experience planning and leading red team or adversary emulation operations against enterprise or cloud environments.
• Demonstrated hands-on experience building, directing, or operating AI-driven or agentic offensive security tooling in real operations.
• 8+ years of experience identifying and exploiting security vulnerabilities across cloud, identity, endpoints, network, and hardware.
• 6+ years of experience with coding or scripting in languages such as Python, C#, C++, Go, PowerShell, .NET, Rust, or other comparable programming languages.

• Execute CyberShield red team operations end-to-end against Microsoft's and select external customer environments.
• Develop custom tooling, implants, and tradecraft to evade modern defenses.
• Lead agentic red team operations by designing and directing AI agents for reconnaissance and exploitation.
• Discover and exploit vulnerabilities across various security layers and demonstrate business impact.
• Serve as the forward-deployed technical lead with customers, translating findings into actionable narratives.
• Prototype and productionize tools and techniques that enhance offensive emulation and vulnerability discovery.
• Collaborate with Blue Teams and internal Microsoft service teams to improve defender readiness.
• Set operational standards and playbooks for CyberShield engagements and mentor senior operators.

• Employees at Microsoft are often offered comprehensive, “world-class” benefits—including health and mental-wellness programs, competitive pay with bonuses and stock awards, and retirement/savings options. Time-off and flexibility are common, with generous vacation and holidays, parental and caregiver leave, and flexible work schedules, alongside learning support, employee resource groups, product discounts, and matching-gifts/volunteering programs. Specific benefits can vary by region.