Senior Security Assurance Engineer

Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity.

Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end to end, simplified solutions. The Microsoft Security organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world. Microsoft runs on Trust, and Security is core to that mission.

The M365 product portfolio makes up some of the most widely used and trusted productivity applications and services in the world.  Would you like to help us protect the billions of people these apps empower to accomplish more in their lives? It’s a fun, dynamic, and always interesting set of problems securing these services and protecting our customers. M365 Security is a Growth Mindset team: We constantly take in new information from diverse sources like internal service partners, bug bounty reports, penetration tests, and external customer feedback to learn more about improving how we can keep our customer's data secure. We are tasked with keeping up with and even exceeding the pace of innovation that is required for Microsoft’s mission: To empower every person and every organization on the planet to achieve more.

The M365 Cloud Security – Security Architecture Lifecycle Team for E+D (SALTed) is looking for a Senior Security Assurance Engineer to help us drive objectives to meet our goal of offering the most secure and trusted productivity experiences in the world. This position requires passion for technology, growth engineering, data-informed decision making, partner engagement, and most of all: customer focus.  If this sounds like something you would like to do, we’d love to talk to you! 

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.

Required Qualifications:

• Substantial experience in software development lifecycle, designing or developing Software and Services, large scale computing, modelling, cyber security, anomaly detection.
• OR Bachelor's Degree in Computer Science, Software Engineering, Computer Networking, Information Assurance, Cyber Security, Mathematics, Risk Management, or related field.
• OR equivalent experience.

Preferred Qualifications:

• 6+ years of experience in identifying security vulnerabilities, software development, large-scale computing, modelling, cyber security, and anomaly detection 
• OR Master's Degree in Statistics, Mathematics, Computer Science or related field. 
• 4+ years of experience with Secure Software Development practices
• 3+ years experience with implementing security controls and process for hyper-scale computing platforms.

Background Check:

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:  Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud Background Check upon hire/transfer and every two years thereafter.

#M365Security

Responsibilities:

As a Senior Security Assurance Engineer in the team, you will be responsible for: 

• Driving Secure Engineering policies, practices, and tooling across user-facing services at Microsoft, including AI platforms and implementations 
• Helping guide Engineering Teams across Microsoft on security best practices 
• Collaborating with teams across Microsoft to help define the state of the art for detection, prevention, and elimination of security risks 
• Identifying emerging security problems that need additional focus, and contributing to building solutions to solve them, often utilizing AI 
• Mentoring others inside and outside of Microsoft on building secure platforms and systems 
• Plan and manage an expanding portfolio of security and privacy programs and track associated metrics 
• Create and present plans to management for driving security and privacy objectives across M365 services 
• Represent Microsoft in various customer briefings and security conferences 
• Any other reasonable activity directed by management.