Senior Security Engineer-Red Team

Company: Microsoft Corporation
Location: Redmond
Posted on: April 5, 2021

Job Description:

Empower every person and organization on the planet to achieve more. That's what inspires us, drives our work and pushes us to challenge the status quo every day. Through our Mobile-first, Cloud-first strategy, we strive to deliver solutions that are optimized for the world and enable customers to drive their business more successfully. At Cloud + Artificial Intelligence (C+AI) we help customers power their solutions using the Microsoft Cloud. The Azure Red Team performs live-site attacks and penetration of Azure, Identity, and Infrastructure services. We are seeking a Security Software Engineer who wants to grow their career in penetration testing/red teaming. The Azure Red Team emulates real-world attacks, providing a critical component of Azure's "Assume Breach" strategy and ensuring readiness against determined adversaries and targeted attacks against the Microsoft Cloud. As a member of the Security Engineering organization in Azure, you will be focused on executing Red Team Operations and building solutions on the Azure platform to advance Red Team productivity and assess Azure at scale. Our engineering work enables deep understanding of the Azure platform and enables our team to execute innovative Red Team Operations. This is a unique position on a unique offensive security team, and our senior engineers/operators will mentor you to succeed. Required Qualifications: * 3+ years experience with one or more general purpose programming languages including but not limited to: C#, Python, Powershell, data query languages* To be considered all candidates must have a minimum of a Current, Active Top Secret Clearance or Top Secret SCI and be willing to upgrade to TS/SCI with Full Scope Polygraph* This role will require you to maintain TS SCI w FSP clearance* Must be able to pass Microsoft Cloud Background check at Hire/Internal transfer and every 2 years thereafter Preferred Qualifications: * TS SCI w FSP is highly preferred.* Bachelors degree in an engineering-related discipline highly preferred* Experience working in both Linux and Windows preferred* Previous experience working in customer-facing capacity preferred* Red Team / Penetration Testing Expertise preferred #AzureSecCSS #AzureSecOpen Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the Accommodation request form. Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work. Red Team Operator - Parlaying your passion for hacking, security research and vulnerability discovery into practical exploitation and adversary activities across the kill chain. You will identify vulnerabilities by simulating external and internal attacks, which exercise and validate Microsoft's ability to prevent, detect, respond and recover. Red Team Tools Engineer - Innovate and evolve a security tool-set which increases the Azure Red Team's ability to find and exploit network, operating system, application, and data-center vulnerabilities. You will build tools that scale and automate red team and pentest operations, enabling realistic threat emulation and attacker TTPs against Azure and Microsoft cloud services. Emerging Threat Research - You will connect with the community on the forefront of emerging threats which affect on-line services. This includes research of externally found exploits as well as proactive research on technology the Microsoft Cloud utilizes and depends on. A passion and drive for turning threat intelligence into threat emulation is a must. Communication & Presentation - A trusted advisor and security expert that partners and advises services teams and executive leadership on detecting vulnerabilities, attack surface reduction, threat mitigation and security best practices. Confident to present findings through proof-of-concept exploits, white papers, brown bags, filing bugs, presentations and formal reports. Work closely with development teams to define and adopt mitigations, develop new solutions for secure development and operations of Microsoft cloud services.

Keywords: Microsoft Corporation, Redmond , Senior Security Engineer-Red Team, Engineering , Redmond, Washington