Software Engineer 2 - Microsoft Red Team

Overview

Do you have a passion for delivering useful and highly secure infrastructure and services? Are you motivated by supporting critical missions that impact large organizations in meaningful ways?

The Microsoft Red Team attacks ALL Microsoft services, continually – identifying critical, systemic risks, demonstrating authentic attack chains and techniques, and working with engineering teams, investigators, and incident responders to continuously improve their ability to protect, detect, investigate, and respond to real attacks.

We are looking for a passionate and capable Software Engineer 2 with site reliability engineering and/or security skills to help manage the critical infrastructure our red team relies on to succeed in its mission – and to do so safely and securely. In this role you’ll be expected to build automation that dynamically creates ephemeral attack infrastructure, build trustworthy engineering systems for highly sensitive tools, build isolated productivity environments, and help establish security policies that allow us to conduct our unique work while maintaining a high security bar.

Our engineers come from diverse backgrounds, are passionate about our products, and grounded in our customers’ needs. Our team values thoughtful engineering, the ability to develop relationships with your peers and partners, and the ability to focus on the outcomes that matter.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities

• Design, implement, test, deploy, and support reliable software and automation for provisioning and managing attack infrastructure for offensive security teams
• Engineer and maintain secure software platforms, services, and automation that provide isolated identity and productivity environments for sensitive operations
• Develop production-quality code using sound engineering practices, including automated testing, code reviews, secure development, observability, documentation, and ongoing operational ownership
• Establish and apply security hygiene and monitoring policies meet Microsoft security requirements without preventing offensive operations
• Support red team operations with infrastructure needs as required

Required Qualifications

Bachelor's Degree in Computer Science or related technical field AND 2+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python

OR equivalent experience.

Other qualifications

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check:

This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Preferred Qualifications

Experience with infrastructure as code, configuration management, continuous integration and deployment, and automated provisioning of ephemeral environments

Experience applying secure engineering practices to sensitive systems, including threat modeling, identity and access isolation, secrets management, and secure development lifecycle practices

Experience collaborating with offensive security teams, security researchers, investigators, or incident responders to translate operational needs into dependable engineering solutions

2-5 years of relevant professional experience as a site reliability engineer, security engineer, or software engineer

Experience designing, developing, testing, and maintaining production software or automation in one or more general-purpose programming languages

Experience building and operating reliable distributed systems, cloud services, or infrastructure platforms, including monitoring, incident response, and performance troubleshooting

Software Engineering IC3 - The typical base pay range for this role across the U.S. is USD $102,100 - $202,200 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $133,800 - $219,200 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:

https://careers.microsoft.com/us/en/us-corporate-pay

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances.

If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Insights from previous hires

Top skills: Automation, Amazon Web Services (AWS), Algorithms, Science, Machine Learning, Data Analysis, Cloud Computing, CI, Android, Analytics

Common previous titles: Software Engineer II, Cloud Solution Architect, Software Engineer, Senior Architect, Solution Engineer, Senior Data Scientist, Director Research, Digital Specialist