Senior Security Engineer

Were looking for an experienced and driven Senior Security Engineer to join our STORM security research group and help shape the security posture of Microsoft Specialized Cloud systems from the ground up.

As part of our mission to embed security throughout the development lifecycle youll lead security design reviews threat modeling and architectural security assessments across a wide range of technologies from OS internals and virtualization to cloud platforms containerized environments application security and AI-enabled systems.

This role combines deep security engineering and architecture expertise with a forward-looking approach to AI-assisted security engineering . Youll be expected to reason deeply about complex systems and review designs hands-on while also using and building AI-powered capabilities that make security analysis more effective scalable and repeatable.

This is a high-impact role for security engineers who thrive on technical depth enjoy building and want to influence secure design at scale.

What Youll Do

• Lead security design and architecture reviews and structured threat modeling engagements for complex systems.

• Analyze systems and architectures to identify trust-boundary violations architectural vulnerabilities unsafe assumptions and opportunities for security-driven redesign.

• Partner closely with engineering and security teams to influence architecture early in the product lifecycle and guide teams toward secure design patterns.

• Perform security analysis using a combination of deep manual investigation and AI-augmented workflows applying engineering judgment to validate findings and challenge assumptions.

• Design prototype and build AI-assisted security capabilities that augment design review threat modeling architecture analysis vulnerability discovery and other security engineering workflows.

• Experiment with new approaches for combining security expertise automation and AI to improve the scale depth and consistency of security reviews.

• Communicate security findings design tradeoffs and recommended mitigations clearly to both technical and non-technical stakeholders.

• Drive security hardening and security-driven redesign efforts that address systemic weaknesses rather than individual vulnerabilities.

• Help evolve our security engineering methodology tooling and practices as AI changes how both products and security analysis are built.

• Strong experience in security engineering security architecture or related technical security roles.

• Deep technical knowledge in one or more of the following areas:

• Operating system internals including Windows/Linux memory management boot security or platform security.

• Virtualization confidential computing cloud architecture or container security.

• Containerized environments incl. Kubernetes and AKS

• Application security and secure software development across services APIs and distributed systems.

• Cloud-native security including identity secrets management isolation and service-to-service trust.

• Experience building with modern AI technologies to solve real engineering or security problems and designing workflows where AI augments expert analysis

Preferred Qualifications

• Expertise in structured threat modeling architectural risk analysis and reasoning about complex systems and trust boundaries.

• Ability to prototype and build tools rather than only consume existing security tooling.

• Experience integrating LLMs or AI agents with existing engineering workflows tools data sources or analysis pipelines.

• Experience applying AI to security problems such as threat modeling design analysis code analysis vulnerability discovery or security automation.

• Understanding of security challenges introduced by AI-enabled systems and the ability to threat-model systems incorporating AI components.

• Experience with scalable security analysis techniques including static analysis dynamic analysis code analysis or custom security automation.

• Prior expertise and experience with Azure-based solutions and services

• Strong understanding of secure coding and code review principles.

  Leadership & Collaboration

  • Strong sense of ownership and responsibility.

  • Excellent communication skills with the ability to articulate complex security issues and design tradeoffs clearly and persuasively.

  • Proven ability to lead cross-functional technical engagements and influence engineering teams without direct authority.

  • Analytical and curious mindset with a strong drive to understand how systems actually work.

  • Comfortable navigating ambiguity and working on problems where neither the security answer nor the engineering solution is predetermined.

  • Builder mindset: willing to experiment prototype iterate and turn promising ideas into capabilities that other security engineers can use.

  Experience & Impact

  • 6 years of experience in security engineering architecture software engineering or related roles.

  • Demonstrated success leading security design reviews threat modeling or architectural security assessments for complex systems.

  • Track record of identifying and helping mitigate significant architectural or system-level security weaknesses.

  • Experience influencing engineering decisions and driving security improvements across organizational boundaries.

This position will be open for a minimum of 5 days with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age ancestry citizenship color family or medical care leave gender identity or expression genetic information immigration status marital status medical condition national origin physical or mental disability political affiliation protected veteran or military status race ethnicity religion sex (including pregnancy) sexual orientation or any other characteristic protected by applicable local laws regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process read more about requesting accommodations.

Required Experience:

IC