Security Engineer
Role details
Job location
Tech stack
Job description
improvements across Microsoft's products. Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability. Responsibilities + Evolve and maintain Microsoft's dynamic detection and sanitizer stack (e.g., ASAN, SanCov), ensuring broad coverage across user-mode and kernel-mode components. + Identify gaps in runtime bug detection and develop new detection techniques, instrumentation strategies, or sanitizer variants to catch classes of memory safety, concurrency, race, and API-misuse bugs at scale. + Improve performance, stability, and usability of sanitizers - reducing overhead, eliminating false positives, and enabling teams to run sanitizers continuously in their dev and CI workflows. + Collaborate with feature teams, tooling developers and scaling, * Evolve and maintain Microsoft's dynamic detection and sanitizer stack (e.g., ASAN, SanCov), ensuring broad coverage across user-mode and kernel-mode components.
- Identify gaps in runtime bug detection and develop new detection techniques, instrumentation strategies, or sanitizer variants to catch classes of memory safety, concurrency, race, and API-misuse bugs at scale.
- Improve performance, stability, and usability of sanitizers - reducing overhead, eliminating false positives, and enabling teams to run sanitizers continuously in their dev and CI workflows.
- Collaborate with feature teams, tooling developers and scaling engineers to upstream sanitizer support, improve build system integration, and ensure that large repos build cleanly with sanitizers enabled.
- Drive broad adoption across Windows and Azure engineering teams, including scaling rollout, integrating signals into branch health, and reducing technical debt from sanitizer-discovered bugs., security improvements across Microsoft's products. Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability. Responsibilities + Evolve and maintain Microsoft's dynamic detection and sanitizer stack (e.g., ASAN, SanCov), ensuring broad coverage across user-mode and kernel-mode components. + Identify gaps in runtime bug detection and develop new detection techniques, instrumentation strategies, or sanitizer variants to catch classes of memory safety, concurrency, race, and API-misuse bugs at scale. + Improve performance, stability, and usability of sanitizers - reducing overhead, eliminating false positives, and enabling teams to run sanitizers continuously in their dev and CI workflows. + Collaborate with feature
Requirements
engineers to upstream sanitizer support, improve build system integration, and ensure that large repos build cleanly with sanitizers enabled. + Drive broad adoption across Windows and Azure engineering teams, including scaling rollout, integrating signals into branch health, and reducing technical debt from sanitizer-discovered bugs. Qualifications Required Qualifications: + Substantial industry experience in software development or security engineering. + Experience programming in a systems language (C, C++, or Rust). Other Requirements: + Microsoft Cloud Background Check: + This position will be required to pass the Microsoft Cloud Background Check upon hire/transfer and every two years thereafter. Preferred Qualifications: + Hands-on experience with memory safety or concurrency debugging, dynamic analysis, or runtime instrumentation. + Experience working with compile time instrumentation such as the sanitizers or equivalent technologies. + Strong understanding of operating system fundamentals, particularly memory management, concurrency, and build systems. + Experience with Windows kernel, low-level debugging, or vulnerability research. + Familiarity with large-scale CI systems, build orchestration, and engineering productivity tooling. + Exposure to fuzzing frameworks, coverage instrumentation, or hybrid static-dynamic detection technologies. + A public track record of security research or contributions to dynamic analysis tooling (open-source or academic). This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, * Substantial industry experience in software development or security engineering.
- Experience programming in a systems language (C, C++, or Rust).
Other Requirements:
- Microsoft Cloud Background Check:
- This position will be required to pass the Microsoft Cloud Background Check upon hire/transfer and every two years thereafter., * Hands-on experience with memory safety or concurrency debugging, dynamic analysis, or runtime instrumentation.
- Experience working with compile time instrumentation such as the sanitizers or equivalent technologies.
- Strong understanding of operating system fundamentals, particularly memory management, concurrency, and build systems.
- Experience with Windows kernel, low-level debugging, or vulnerability research.
- Familiarity with large-scale CI systems, build orchestration, and engineering productivity tooling.
- Exposure to fuzzing frameworks, coverage instrumentation, or hybrid static-dynamic detection technologies.
- A public track record of security research or contributions to dynamic analysis tooling (open-source or academic).
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled., teams, tooling developers and scaling engineers to upstream sanitizer support, improve build system integration, and ensure that large repos build cleanly with sanitizers enabled. + Drive broad adoption across Windows and Azure engineering teams, including scaling rollout, integrating signals into branch health, and reducing technical debt from sanitizer-discovered bugs. Qualifications Required Qualifications: + Substantial industry experience in software development or security engineering. + Experience programming in a systems language (C, C++, or Rust). Other Requirements: + Microsoft Cloud Background Check: + This position will be required to pass the Microsoft Cloud Background Check upon hire/transfer and every two years thereafter. Preferred Qualifications: + Hands-on experience with memory safety or concurrency debugging, dynamic analysis, or runtime instrumentation. + Experience working with compile time instrumentation such as the sanitizers or equivalent technologies. + Strong understanding of operating system fundamentals, particularly memory management, concurrency, and build systems. + Experience with Windows kernel, low-level debugging, or vulnerability research. + Familiarity with large-scale CI systems, build orchestration, and engineering productivity tooling. + Exposure to fuzzing frameworks, coverage instrumentation, or hybrid static-dynamic detection technologies. + A public track record of security research or contributions to dynamic analysis tooling (open-source or academic). This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status
About the company
Microsoft is a global technology company headquartered in Redmond, Washington. Our mission is to empower every person and every organization on the planet to achieve more. We develop, license, and support a wide range of software products, services, and devices that help individuals and businesses realize their full potential.
Our flagship products include the Microsoft 365 productivity cloud, Windows operating system, Azure cloud platform, and Dynamics 365 business applications. We are also a leader in areas such as artificial intelligence, cybersecurity, developer tools, and gaming through Xbox and Game Pass.
With operations in more than 190 countries and over 220,000 employees worldwide, Microsoft is committed to responsible innovation, inclusive economic growth, and sustainability. We work closely with governments, industries, and communities to ensure that technology serves the public good and helps address some of the world’s most pressing challenges.
As we celebrate our 50th anniversary in 2025, we continue to look forward—investing in AI, cloud, and quantum computing to shape the future of work, education, and society at large scale.