Security Assurance Engineer

Microsoft is seeking a Security Assurance Engineer to join their Cloud & AI organization. This role is critical in safeguarding Microsoft's infrastructure, services, and customer data, blending technical depth with strategic oversight to ensure security risks are identified, assessed, and mitigated across complex systems and workflows.

The position offers a unique opportunity to work at one of the world's largest enterprise service companies, with a focus on securing digital technology platforms, devices, and clouds in both customer environments and Microsoft's internal estate. The role requires expertise in threat modeling, security reviews, and risk assessment, with responsibilities including leading security evaluation sessions, conducting gap analyses, and enforcing security policies.

The ideal candidate will have 4+ years of experience in software development lifecycle, large scale computing, threat modeling, or cyber security, with either a Bachelor's or Master's degree in a relevant field. Experience in offensive security, pen-testing, and AI security is highly valued.

The position offers competitive compensation ranging from $119,800 to $234,700 per year (higher in SF Bay Area and NYC), along with comprehensive benefits including healthcare, educational resources, and parental leave. The role supports up to 100% work from home with 0-25% travel requirements.

Microsoft's culture emphasizes a growth mindset, innovation, and collaboration, making this an excellent opportunity for security professionals looking to make a significant impact in enterprise security. The role requires passing security screenings and citizenship verification due to the sensitive nature of the work.

This position combines technical expertise with strategic thinking, offering the chance to work on cutting-edge security challenges while contributing to Microsoft's mission of empowering every person and organization on the planet to achieve more. The successful candidate will join a team focused on excellence and innovation in security assurance, working with various stakeholders to protect critical infrastructure and data.