The Security Assurance Engineer II role at Microsoft focuses on executing security assurance activities within the Marketing Security Risk & Compliance team. This team collaborates with service owners and engineering teams to identify security risks and enhance service architecture. The position emphasizes modernizing security review processes through automation and data-driven practices. The engineer will evaluate services against security requirements and support threat modeling while gaining experience in various security domains.

• Bachelor's Degree in Computer Science or related technical field AND 2+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience.
• Foundational experience with security assessments, threat modeling, vulnerability management, application security, cloud security, or secure software development.
• Understanding of common security principles involving authentication, authorization, least privilege, encryption, network security, secrets management, logging, and data protection.
• Experience analyzing technical information and documenting findings or recommendations.
• Experience collaborating with engineering, operations, security, or compliance stakeholders.
• Experience developing or maintaining technical solutions using one or more programming, scripting, or query languages such as C#, Python, SQL, PowerShell, or KQL.

• Execute security assurance activities for assigned Microsoft Marketing services and engineering programs.
• Support and independently conduct security reviews, threat-modeling engagements, and Secure Development Lifecycle assessments.
• Review service architecture, data flows, trust boundaries, cloud resources, identities, endpoints, and network configurations.
• Build and maintain scripts, queries, APIs, and automation that collect security evidence and analyze technical signals.
• Develop repeatable methods for automatically assessing service configurations and security signals.
• Validate automated findings by investigating false positives and gathering supporting evidence.
• Document findings with clear technical descriptions and recommended remediation.
• Work directly with service owners and developers to clarify requirements and answer security questions.
• Create and maintain security findings in engineering tracking systems and monitor progress toward remediation.
• Support security assurance for tenant migrations, new technologies, and emerging engineering patterns.

• Employees at Microsoft are often offered comprehensive, “world-class” benefits—including health and mental-wellness programs, competitive pay with bonuses and stock awards, and retirement/savings options. Time-off and flexibility are common, with generous vacation and holidays, parental and caregiver leave, and flexible work schedules, alongside learning support, employee resource groups, product discounts, and matching-gifts/volunteering programs. Specific benefits can vary by region.