The Principal Security Engineer will be a key operator in the CyberShield program within Microsoft's Red Team organization, focusing on adversary emulation to enhance security for both Microsoft and its external customers. This role emphasizes the use of AI-driven techniques to automate and scale red team operations, ensuring comprehensive security assessments across various domains. The engineer will collaborate closely with security leaders and internal teams to translate findings into actionable insights and improve defensive measures. This position requires a strong technical background and the ability to lead complex security engagements.

• Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 6+ years experience in security or related field OR Bachelor's Degree in the same fields AND 8+ years experience in security or related field OR equivalent experience.
• Ability to meet Microsoft, customer and/or government security screening requirements.
• 6+ years of experience planning and leading red team or adversary emulation operations against enterprise or cloud environments.
• Demonstrated hands-on experience building, directing, or operating AI-driven or agentic offensive security tooling in real operations.
• 8+ years of experience identifying and exploiting security vulnerabilities across cloud, identity, endpoints, network, and hardware.

• Execute CyberShield red team operations end-to-end against Microsoft and select external customer environments.
• Develop custom tooling, implants, and tradecraft to evade modern defenses.
• Lead agentic red team operations by designing and directing AI agents for reconnaissance and exploitation.
• Discover and exploit vulnerabilities across various security layers and demonstrate business impact.
• Serve as the forward-deployed technical lead with customers, translating findings into actionable narratives.
• Prototype and productionize tools and techniques that enhance offensive emulation and vulnerability discovery.
• Collaborate with internal teams to convert findings into product hardening and improved defender readiness.
• Set operational standards and playbooks for CyberShield engagements and mentor senior operators.

• Employees at Microsoft are often offered comprehensive, “world-class” benefits—including health and mental-wellness programs, competitive pay with bonuses and stock awards, and retirement/savings options. Time-off and flexibility are common, with generous vacation and holidays, parental and caregiver leave, and flexible work schedules, alongside learning support, employee resource groups, product discounts, and matching-gifts/volunteering programs. Specific benefits can vary by region.