Security Engineer II (Services)

The Microsoft Windows Security team is looking for a learn-it-all security engineer that will help secure Microsoft Windows products and services, with focus on offensive security, security engineering, and mitigations for online services.

The Windows Security team is responsible for securing the services that build and power Windows, used by billions of customers every day and in businesses worldwide. This team performs security design reviews, code reviews, penetration testing, vulnerability research and driving systematic mitigations to security risks on Windows to make sure they meet the highest possible security standards and proactively defend cybersecurity threats. This role is hands-on, technically demanding, and central to strengthening the security posture of Windows online presence.

In this Security Engineer II (Services) - Windows Security role, you will uncover novel attack vectors, develop proof-of-concept mitigations, and partner directly with Windows product engineering teams to design durable & scalable defense. The candidate will have hands-on experience with penetration testing (code audit, using tools, finding creative ways to break assumptions), a clear understanding of security fundamentals, solid computer science skills, and a passion for keeping Microsoft customers safe.