The Microsoft Windows Security team is seeking a security engineer focused on offensive security, security engineering, and online service mitigations. This hands-on role involves uncovering attack vectors, developing proof-of-concept mitigations, and collaborating with product engineering teams to enhance security. The team is responsible for securing Windows services used globally, ensuring they meet high security standards. Candidates should possess strong penetration testing skills and a passion for cybersecurity.

• Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in security or related field.
• Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 6+ years experience in security or related field.
• Ability to meet Microsoft, customer and/or government security screening requirements.

• Lead and participate in security reviews to identify and mitigate risk in Microsoft services.
• Build reusable agents and tools to improve the consistency and quality of security reviews.
• Review deployments and code for security defects and architectural risk using automated tools.
• Safely demonstrate the real-world impact of security flaws to aid in prioritization and fix validation.
• Be the security contact for teams building new innovative products and services.
• Apply an adversary mindset to creatively bypass security controls.
• Collaborate with engineering teams to improve security and articulate the value of security investments.

• Employees at Microsoft are often offered comprehensive, “world-class” benefits—including health and mental-wellness programs, competitive pay with bonuses and stock awards, and retirement/savings options. Time-off and flexibility are common, with generous vacation and holidays, parental and caregiver leave, and flexible work schedules, alongside learning support, employee resource groups, product discounts, and matching-gifts/volunteering programs. Specific benefits can vary by region.