> Markdown version of [/jobs/ext/3018394-microsoft-offensive-research-security-engineering](https://www.wearedevelopers.com/jobs/ext/3018394-microsoft-offensive-research-security-engineering). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Microsoft Offensive Research & Security Engineering - **Company:** Microsoft - **Location:** San Francisco, CA, United States - **Experience:** Experienced - **Salary:** $142,800.0 - $274,800.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Software System Penetration Testing, Microsoft Azure, Microsoft Online Services, C++ (Programming Language), Code Review, Fuzz Testing, Intrusion Detection and Prevention, Reverse Engineering, Software Engineering, Information Technology, Operating System Security, Vulnerability Analysis - **Published:** September 20, 2026 - **Apply:** https://www.dice.com/job-detail/215432b3-0550-4e81-9659-461a5fa53a28 ## About the Role * Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in security or related field OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 6+ years experience in security or related field + OR equivalent experience. Other Requirements: * Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: + Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud Background Check upon hire/transfer and every two years thereafter., * Public or internal track record of relevant security research * Understanding of operating system security fundamentals, including kernel or low level platform components * Experience performing vulnerability research, including code review, fuzzing, reverse engineering, or exploit development * Experience developing or applying mitigations, such as memory safety protections, sandboxing, or platform hardening techniques * 4+ years experience in security-related elements of software engineering or in another security-related field * 4+ years experience with systems level programming languages such as C, C++, or Rust Penetration Testing IC5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year. ## Description In this role, you will work across the discovery and mitigation of security vulnerabilities - identifying weaknesses in systems, understanding their impact, and helping drive protections that improve the security of Microsoft platforms at scale. You will partner with engineers across Windows, Azure, and platform infrastructure to architect security solutions and influence the way systems are designed and built. This role is well suited to engineers who enjoy deep systems work, solving complex problems, and delivering high impact security outcomes. Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond Responsibilities * Drive identification and analysis of security vulnerabilities across operating system and platform components, including design review, code review, fuzzing, and variant analysis * Develop and influence mitigations and protections that reduce risk across platforms, improving resilience against entire classes of vulnerabilities * Advocate for security with engineering teams to integrate security into the development lifecycle, influence design decisions and improve secure engineering practices. Autonomously drive coordination and collaboration across broad groups across Microsoft. Devise and advocate for broadly applicable solutions. * Contribute to the development and scaling of security tooling, detection capabilities, or analysis techniques that enable broader coverage and earlier detection of vulnerabilities * Partner across organizations to translate security findings into systemic improvements and measurable security outcomes * Stay current on attacker techniques, emerging vulnerability classes, and industry trends, applying this knowledge to improve Microsoft's security posture * Provide technical leadership within and across teams, contributing to direction setting, problem decomposition, and delivery of complex security initiatives. Mentor and coach peers on new approaches and best practices. Coordinate across teams and leads resolution of vulnerabilities, threat attacks, and security issues. ## Related Videos - [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure) - [How will artificial intelligence change the future of software testing?](https://www.wearedevelopers.com/videos/85-how-will-artificial-intelligence-change-the-future-of-software-testing) - [Are Code Reviews Worth It? Insights from 16 Years of Review Data](https://www.wearedevelopers.com/videos/1135-are-code-reviews-worth-it-insights-from-16-years-of-review-data) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Mutation Testing and Fuzzing in C#](https://www.wearedevelopers.com/videos/703-mutation-testing-and-fuzzing-in-c) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) ## Related Articles - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [How Much Does a Software Engineer Make? Realistic Software Engineering Salaries](https://www.wearedevelopers.com/magazine/425-how-much-does-a-software-engineer-make-realistic-software-engineering-salaries) - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london) - [Highest Paying Tech Companies in Europe](https://www.wearedevelopers.com/magazine/162-highest-paying-tech-companies-in-europe)