Taro Logo

Security Engineer II

Microsoft is a global technology company that empowers every person and organization on the planet to achieve more.
Security
Mid-Level Software Engineer
Remote
5,000+ Employees
3+ years of experience
Cybersecurity

Job Description

Microsoft's Offensive Research & Security Engineering (MORSE) team is seeking a security engineer to help secure Microsoft products and devices, particularly the Windows operating system used by billions of customers. This role involves performing security design reviews, code reviews, and penetration testing on key Windows features to ensure they meet the highest security standards. The ideal candidate will bring hands-on experience with native code (C/C++), penetration testing expertise, and a strong understanding of OS security fundamentals.

As part of the MORSE team, you'll be responsible for identifying and mitigating security vulnerabilities in critical OS features including network protocols and security features. You'll work directly with product teams to improve security measures and articulate the business value of security investments. The role offers the opportunity to impact the security of Microsoft's core products while collaborating with both internal teams and the external security research community.

The position requires strong technical skills in security engineering and software development, with a focus on operating system security. You'll need experience with vulnerability discovery and a solid foundation in computer science. Microsoft offers comprehensive benefits, professional development opportunities, and the chance to work on products that affect billions of users worldwide. The role is based in London with up to 100% work from home flexibility.

This is an excellent opportunity for a mid-level security professional who is passionate about keeping Microsoft customers safe and wants to make a significant impact on the security of widely-used technology products. The collaborative environment and Microsoft's commitment to innovation make this an ideal role for someone looking to grow their career in security engineering while working on challenging and meaningful projects.

Last updated a day ago

Responsibilities For Security Engineer II

  • Participate in security reviews to identify and mitigate risk in Microsoft products
  • Be the security contact for teams building new innovative products
  • Identify security vulnerabilities in OS features
  • Leverage understanding of security to devise new protections
  • Interact with external security community and researchers
  • Collaborate with product teams to improve security

Requirements For Security Engineer II

  • Mid-level experience in software engineering or security-related field
  • Experience identifying vulnerabilities in operating systems and native applications
  • Experience with C/C++
  • Public track record of security research (preferred)
  • Experience exploiting bugs and bypassing security mitigations (preferred)
  • Familiarity with Microsoft Windows architecture (preferred)

Benefits For Security Engineer II

Medical Insurance
Education Budget
Parental Leave
Mental Health Assistance
  • Industry leading healthcare
  • Educational resources
  • Discounts on products and services
  • Savings and investments
  • Maternity and paternity leave
  • Generous time away
  • Giving programs
  • Networking opportunities

Related Jobs

Security Engineer II

Security Engineer II position at Microsoft focusing on security automation, cloud security, and incident response, offering remote work from London with comprehensive benefits.

Incident Response Engineer, UK Security Operations

Incident Response Engineer position at Google's UK Security Operations team, focusing on security incident response, threat hunting, and SOC optimization for private cloud services.

Detection Engineer

Detection Engineer role at AIG focusing on cybersecurity, threat detection, and security automation using Python and modern DevSecOps practices.

Incident Response Engineer, UK Security Operations

Incident Response Engineer position at Google's UK Security Operations team, focusing on security incident response, threat hunting, and platform security improvements for public sector cloud services.

Anti-Cheat Engineer

Anti-Cheat Engineer position at Rockstar Games focusing on game security, malware analysis, and protecting player experience through anti-cheat systems implementation.