> Markdown version of [/jobs/ext/1949970-principal-software-engineer](https://www.wearedevelopers.com/jobs/ext/1949970-principal-software-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Software Engineer - **Company:** Microsoft - **Location:** Redmond, WA, United States - **Experience:** Expert - **Salary:** $142,800.0 - $274,800.0 - **Contract:** Permanent contract - **Skills:** C (Programming Language), Java (Programming Language), JavaScript (Programming Language), Application Programming Interfaces (APIs), Artificial Intelligence, Antivirus Softwares, Microsoft Antivirus, Microsoft Azure, Microsoft Online Services, C Sharp (Programming Language), C++ (Programming Language), Programming Tools, Distributed Systems, Github, Intrusion Detection and Prevention, Python (Programming Language), Apache Maven, Microsoft Visual Studio, NuGet, Open Source Technology, Program Analysis, Software Engineering, Systems Integration, Rust (Programming Language), Data Processing, Malware, Backend, Information Technology, Npm(Software), Data Pipelines, Vulnerability Analysis, Golang - **Published:** August 6, 2026 - **Apply:** https://dejobs.org/x/x/B1EBA77565B24FD6936FA0A9F934927E/job/ ## About the Role * Bachelor's Degree in Computer Science or related technical field AND 6+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience. Other Requirements: Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: * Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter., * Bachelor's Degree in Computer Science or related technical field AND 8+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C, Java, JavaScript, Rust, Go, or Python - OR Master's Degree in Computer Science or related technical field AND 6+ years technical engineering experience OR equivalent experience * 6+ years of experience designing, building, and shipping production backend services, platforms, or data pipelines. * Hands-on experience with software supply chain security and open-source package ecosystems (e.g., npm, PyPI, NuGet, Maven, Cargo), including dependency, vulnerability, or malware analysis. * Experience with program analysis techniques - static and dynamic analysis, sandboxing/detonation, deobfuscation, or behavioral analysis - to determine what code actually does. * Experience building and operating large-scale scanning, detection, or data-processing pipelines in the cloud (Azure preferred). * Familiarity with supply chain integrity frameworks and standards such as SBOM, SLSA, provenance, and artifact signing (e.g., Sigstore). * Demonstrated security background - threat detection, malware/vulnerability research, EDR/antivirus, or other security-sensitive software. * Experience integrating with developer tools #MSFTSecurity Software Engineering IC5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year. ## Description * Define and drive the technical direction for software supply chain protection capabilities that detect and prevent threats before they reach developer projects or production environments. * Design, build, and operate large-scale distributed systems that analyze open-source packages, code behavior, provenance, and trust signals across ecosystems in real time. * Develop new security primitives for package risk assessment, malicious dependency detection, typosquatting prevention, provenance validation, and AI-assisted threat detection. * Provide hands-on technical leadership across architecture, design reviews, API/data contracts, prototypes, and implementation to de-risk complex systems and accelerate delivery. * Partner across Microsoft Defender, GitHub, Visual Studio, Azure, and open-source ecosystem teams to embed protection into the tools and workflows developers already use. * Drive engineering excellence through reliable, scalable, secure, and observable services, with strong focus on quality, performance, and operational readiness. * Mentor and guide engineers, foster a builder culture of clarity, collaboration, and technical rigor, and embody Microsoft's culture and values. * Embody our Culture (https://www.microsoft.com/en-us/about/corporate-values) and Values (https://careers.microsoft.com/us/en/culture) ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [How your .NET software supply chain is open to attack : and how to fix it](https://www.wearedevelopers.com/videos/938-how-your-net-software-supply-chain-is-open-to-attack-and-how-to-fix-it) - [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall) - [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most) - [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models) ## Related Articles - [How Much Does a Software Engineer Make? Realistic Software Engineering Salaries](https://www.wearedevelopers.com/magazine/425-how-much-does-a-software-engineer-make-realistic-software-engineering-salaries) - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london) - [Best Countries for Software Engineers](https://www.wearedevelopers.com/magazine/267-best-countries-for-software-engineers) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)