> Markdown version of [/jobs/ext/2965285-principal-security-engineer](https://www.wearedevelopers.com/jobs/ext/2965285-principal-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Security Engineer - **Company:** Microsoft - **Location:** San Francisco, CA, United States - **Experience:** Expert - **Salary:** $165,600.0 - $296,400.0 - **Contract:** Permanent contract - **Skills:** .NET Framework, Microsoft Windows, Active Directory, Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Microsoft Online Services, C Sharp (Programming Language), C++ (Programming Language), Cloud Computing, Linux, Ghost (Backup Software), Intrusion Detection and Prevention, Python (Programming Language), Open Source Technology, Windows PowerShell, Red Team (Cyber Security), Rust (Programming Language), Scripting, Google Cloud, Cloud Platform System, Large Language Models, Multi-Agent Systems, Mitre Att&ck, AI Platforms, Kubernetes, Information Technology, Blue Team (Cyber Security), Golang, Programming Languages - **Published:** September 17, 2026 - **Apply:** https://www.jobmonkeyjobs.com/career/28026700/Principal-Security-Engineer-Any-All-Cities-1210 ## About the Role * Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 6+ years experience in security or related field OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 8+ years experience in security or related field OR equivalent experience., * Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: * Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter. * Customer environment screening: Operators working in customer environments may be required to complete additional customer- or government-directed vetting., * Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 8+ years experience in security or related field OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 12+ years experience in security or related field OR equivalent experience. * 6+ years of experience planning and leading red team or adversary emulation operations against enterprise or cloud environments. * Demonstrated hands-on experience building, directing, or operating AI-driven or agentic offensive security tooling in real operations. Active U.S. Government TS//SCI clearance with full-scope polygraph is a strong plus, enabling immediate work with our most sensitive customers. * 8+ years of experience identifying and exploiting security vulnerabilities across cloud (Azure, AWS, GCP), identity (Entra ID / Active Directory), Windows and Linux endpoints, network, and hardware. * Experience designing multi-agent or autonomous systems using large language models - orchestration frameworks, tool use, agent evaluation, and safety guardrails - applied to offensive security. * 6+ years of experience with coding or scripting in languages such as Python, C#, C++, Go, PowerShell, .NET, Rust, or other comparable programming languages, including building and maintaining offensive tooling. * Experience in customer-facing or consulting roles delivering red team results to executive audiences; ability to move fluently between deep technical detail and business impact. * Blue team, detection engineering, or incident response experience - you understand how defenders think and can help them get better. * Familiarity with MITRE ATT&CK, threat-informed defense, and regulated red team frameworks (e.g., TIBER-EU, CBEST, DORA). * Recognized contributions to the security community: research, open-source tooling, conference talks, or CVEs. Penetration Testing IC6 - The typical base pay range for this role across the U.S. is USD $165,600 - $296,400 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $220,800 - $331,200 per year. ## Description * Execute CyberShield red team operations end-to-end - initial access, privilege escalation, lateral movement and pivoting, persistence, objective completion, and reporting - against Microsoft's own environment and select external customer environments, using real-world adversary tactics, techniques, and procedures to validate detection, investigation, and response. * Develop custom tooling, implants, and tradecraft to evade modern defenses and emulate the capabilities of advanced adversaries. * Lead agentic red team operations: design and direct AI agents that autonomously perform reconnaissance, vulnerability discovery, exploitation, and post-exploitation; define guardrails, oversight, and human-in-the-loop checkpoints; and drive the shift from human-led execution to continuous, software-driven, agentic analysis. * Discover and exploit vulnerabilities end-to-end across application, cloud, identity, network, hardware, and operational security layers, chaining findings into realistic attack paths that demonstrate business impact. * Serve as the forward-deployed technical lead with customers: brief CISOs and security leaders, translate findings into actionable narratives, and deliver lightweight defensive engineering guidance alongside offensive results. * Prototype and productionize tools, agents, and techniques that scale offensive emulation and vulnerability discovery, and feed requirements back to our offensive AI platform engineering team based on what works in real environments. * Collaborate with Blue Teams, GHOST (Microsoft's adversary hunting organization, which proactively hunts for and responds to real-world intrusions in Microsoft and customer environments), MSTIC (the Microsoft Threat Intelligence Center, which tracks nation-state and criminal threat actors and their tradecraft), and internal Microsoft service teams to convert findings into product hardening and improved defender readiness. * Set operational standards and playbooks for CyberShield engagements; mentor senior operators and virtual-team specialists drawn from across MRT. * Advocate for security change across Microsoft and its customers by building partnerships and clearly communicating the impact of risk. * Embody our Culture and Values. ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [How Much Does a Software Engineer Make? Realistic Software Engineering Salaries](https://www.wearedevelopers.com/magazine/425-how-much-does-a-software-engineer-make-realistic-software-engineering-salaries) - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london)