Principal Security Engineer

Responsibilities

• Perform security reviews and deep dives for Azure cloud-hosted service ecosystems.
• Identify security risks, architectural anti-patterns, and systemic security challenges.
• Develop security guidance, reference architectures, and practical remediation strategies.
• Innovate security assessment and automation approaches using AI and automation capabilities.
• Lead stakeholder discussions and influence engineers, architects, and product leaders across Azure.
• Mentor engineering teams and enable self-service security capabilities and secure development practices.

Requirements

• Master's degree in a relevant field and 4+ years of relevant experience, or bachelor's degree in a relevant field and 6+ years of relevant experience, or equivalent experience.
• Expertise in at least one core area such as virtualization, memory safety, networking protocols, cloud security, or kernel security.
• Experience with software development lifecycle, large-scale computing, threat modeling, cybersecurity, or anomaly detection.
• Ability to meet Microsoft and Microsoft Cloud background check requirements.
• Preferred experience identifying and exploiting vulnerabilities across Azure, AWS, or GCP; Entra ID or Active Directory; Windows or Linux endpoints; and networks.
• Preferred 5+ years of security assessment and penetration testing experience.
• Preferred 5+ years securing cloud computing environments.
• Preferred 5+ years coding or scripting in languages such as Python, C#, C++, Go, PowerShell, .NET, or Rust, including building security tooling.
• Preferred customer-facing or consulting experience delivering security outcomes to executive audiences.

Benefits

• Base pay is listed at USD $142,800-$274,800 per year in the U.S., with a separate San Francisco Bay Area and New York City range of USD $188,000-$304,200 per year.
• Certain roles may be eligible for benefits and other compensation.
• The position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until filled.
• The role requires Microsoft and Microsoft Cloud background checks upon hire or transfer and every two years thereafter.