Expoint - all jobs in one place

מציאת משרת הייטק בחברות הטובות ביותר מעולם לא הייתה קלה יותר

Limitless High-tech career opportunities - Expoint

Microsoft Senior Security Engineer 
Taiwan, Taoyuan City 
596306128

03.04.2025

In this role, you'll partner with product engineering teams to assess the security of their services and ensure that we live up to our security promises. You'll plan and manage your own security engagements, from enumerating the attack surface, setting up a test environment, evaluating the design and testing the implementation for security deficiencies, and providing your findings and recommendations for remediation. As you discover systemic issues and anti-patterns, you will be empowered to propose and drive solutions that raise the security bar across multiple services by eliminating entire vulnerability classes.You should be comfortable reading and understanding code to analyze implementations for potential security vulnerabilities and inform your penetration testing. Familiarity with common web penetration testing tools such as Burp Suite or other intercepting proxies will be necessary. As you dive deep into a given service, you will examine all layers of the stack for the service, ranging from the web UI, the API, the cloud environment, cluster orchestration, and Linux-based nodes and containers. You'll have the opportunity to amplify your impact by suggesting product improvements that provide customers with a paved path to security by default.Because this role focuses largely on the underlying platform, experienced security engineers who are new to the AI space are still encouraged to apply. We seek well-rounded individuals, and we leverage each other as appropriate to create a well-rounded team. While technical fundamentals are important, the ability to navigate both technical and organizational ambiguity, go deep in unfamiliar domains, independently develop subject-matter expertise, and build trust with partner teams will be required to succeed in this role.


Required/Minimum Qualifications:

  • 5+ years experience in cybersecurity or software development
    • OR bachelor's degree in computer science, Cybersecurity, or related field
    • OR equivalent experience.
  • 5+ years experience performingsecurityassessments and penetration testing
  • 3+ years experience securingcloudcomputing environments
  • 3+ years experience with one or more of C#, Python, Rust, or JavaScript, PowerShell

Other Requirements

  • securityscreening requirements are required for this role. These requirements include, but are not limited to the following specializedsecurityscreenings: MicrosoftCloudBackground Check:
    • This position will be required to pass the Microsoft background and MicrosoftCloudbackground check upon hire/transfer and every two years thereafter

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:Microsoft will accept applications for the role until April 3rd, 2025.


Responsibilities
  • Use subject matter expertise to identify potential security issues, tools, mitigations, and processes (e.g., architecture, failure modes, attack chain, threat modeling, vulnerabilities).
  • Analyze complex issues using multiple data sources to identify security problems.
  • Create new solutions to mitigate security issues; Help to drive resolution for systemic security issues.
  • Effectively communicate security defects to stakeholders at various levels.
  • Work as an effective and inclusive team player, sharing and learning from others.
  • Other
    • Embody our