Senior Security Engineer
Redmond, Washington, United States
Full Time Senior-level / Expert USD 112K - 238K
Microsoft
Every company has a mission. What's ours? To empower every person and every organization to achieve more. We believe technology can and should be a force for good and that meaningful innovation contributes to a brighter world in the future and today.Are you driven by a hacker mindset and ardent about enhancing the security of hardware, firmware, and low-level components? If so, this job opportunity is tailored for you!
Azure Hardware and Firmware DevSec team is currently in search of a Senior Security Engineer with expertise in hardware, firmware, and related low-level components.
As a member of the HW/FW Security team within the Azure Security organization, you will have an opportunity to shape the landscape of platform security. This involves conducting security reviews such as threat modeling, design and code assessments for both Microsoft and third-party HW/FW solutions, penetration testing, vulnerability analysis, devising solutions to address identified vulnerabilities, and providing guidance to teams on securely building hardware, firmware, and related components.
We are seeking a detail-oriented, self-motivated engineer with exceptional communication skills who revels in delving into the security intricacies of various low-level components, including motherboard peripherals, network communication, disk controllers, and hypervisors. In this role, you will collaborate closely with other Security Engineers,
Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
Responsibilities
- Threat Modeling / Security Assessments: Utilizing research and expertise to conduct threat modeling and security assessments of Azure HW/FW solutions, and cloud infrastructure. Your objective is to prioritize areas of security risk, identifying and addressing security defects that may impact on Azure's capacity to safeguard against, detect, investigate, and recover from security incidents.
- Security Reviews: Prioritize the highest risk features within Azure and perform comprehensive reviews of their design, source code, or final product to identify security defects. Utilize existing tools or develop new ones, such as static/dynamic analysis tools, to enhance efficiency and quality of work. Take the lead in addressing identified security flaws and implementing proactive security hardening measures to mitigate future exploitable vulnerabilities.
- Driving Security: Collaborate with cloud server and in-rack devices hardware ecosystem partner to establish security solutions and requirements, identify critical threats, and develop agreed plans for remedial actions. Collaborate with Microsoft Hardware Engineering teams from the early stages of product development to guarantee the security of Azure hardware platforms.
Contributing to Policies: Engage with cross-company teams and industry partners to ensure that our insights are effectively integrated into development policies, standards, and practices. Aim to continuously elevate the security standards by fostering a growth mindset and implementing best practices.
- Emerging Threat Research: Stay at the forefront of emerging threats impacting cloud services by conducting research on externally identified vulnerabilities and proactively investigating security risks associated with the technologies utilized by Azure and our customers.
- Communication & Presentation: Be an competent in security and be available to answer questions and give guidance on addressing security defects. Present team findings through white papers and security assessment reports. Work with the other teams to define and adopt new best practices for secure development and operations.
Other
Qualifications
Required Qualifications:
- 5+ years experience in software development lifecycle, large scale computing, modeling, cyber security, anomaly detectiono OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field
- OR equivalent experience.
Preferred Qualifications:
6+ years experience in software development lifecycle, large scale computing, modeling, cyber security, anomaly detection
OR Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related fieldOR equivalent experience.
- Certified Information Systems Security Professional (CISSP) Certification, Security+ Certification, or relevant certification.
- This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.
- 6+ years experience in software/firmware/hardware development lifecycle, large scale computing, modeling, cyber security OR Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field OR equivalent experience.
- Profound understanding of server platform buses and peripherals, complemented by hands-on experience in conducting security analyses of peripherals.
- Proficiency in hardware description languages (HDL) and RTL, coupled with hands-on experience in conducting security reviews of hardware design.
- Deep and broad understanding of security vulnerabilities and attacks (Hardware, Software, Network, and People) and ability to apply them or find new ones based on new technology being developed.
- Experienced coding skills in one or more popular languages and platforms, including C/C++, C#, assembly, Rust, Python, and others, and the ability to pick up new platforms quickly.
- Detailed understanding of encryption, low-level networking protocols, operating systems including Linux and Windows
Software Engineering IC4 - The typical base pay range for this role across the U.S. is USD $112,000 - $218,400 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $145,800 - $238,600 per year. Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay
Microsoft will accept applications for the role until April 29, 2024.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the Accommodation request form.
Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.
#Firmware #Hardware #MSFTSecurity
Tags: Azure C CISSP Cloud Computer Science Encryption Linux Mathematics Pentesting Python Risk management Rust SDLC Security assessment Security Assessment Report Threat Research Vulnerabilities Windows
Perks/benefits: Health care Medical leave
More jobs like this
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
- Open Information Security Officer jobs
- Open Information Security Specialist jobs
- Open Information Systems Security Officer (ISSO) jobs
- Open Ethical hacker / Pentester H/F jobs
- Open Senior Cyber Security Engineer jobs
- Open Cyber Security Architect jobs
- Open Cyber Security Specialist jobs
- Open Manager Pentest H/F jobs
- Open Cybersecurity Analyst jobs
- Open Product Security Engineer jobs
- Open Staff Security Engineer jobs
- Open Chief Information Security Officer jobs
- Open Consultant infrastructure sécurité H/F jobs
- Open Senior Information Security Analyst jobs
- Open Security Specialist jobs
- Open Senior Information Security Engineer jobs
- Open Cybersecurity Consultant jobs
- Open Senior Penetration Tester jobs
- Open IT Security Analyst jobs
- Open Consultant SOC / CERT H/F jobs
- Open Sr. Security Engineer jobs
- Open IT Security Engineer jobs
- Open Security Researcher jobs
- Open Cybersecurity Specialist jobs
- Open Security Operations Analyst jobs
- Open CISM-related jobs
- Open Windows-related jobs
- Open Network security-related jobs
- Open Pentesting-related jobs
- Open ISO 27001-related jobs
- Open Application security-related jobs
- Open Agile-related jobs
- Open GCP-related jobs
- Open Vulnerability management-related jobs
- Open Analytics-related jobs
- Open IAM-related jobs
- Open CISA-related jobs
- Open Threat intelligence-related jobs
- Open SaaS-related jobs
- Open APIs-related jobs
- Open Security assessment-related jobs
- Open Malware-related jobs
- Open Forensics-related jobs
- Open Java-related jobs
- Open DevOps-related jobs
- Open Security Clearance-related jobs
- Open CEH-related jobs
- Open IDS-related jobs
- Open EDR-related jobs
- Open Kubernetes-related jobs