Microsoft Security Researcher II 

Taiwan, Taoyuan City 

317020675

We are looking for a security researcher who is passionate about security research in hardware, firmware and virtualization platforms. You should have the following qualifications:

• Experience in software development lifecycle, large scale computing, modeling, cyber security, anomaly detection  OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field  OR equivalent experience.
• Strong grasp security vulnerabilities, how they can be exploited, and how they can be prevented.
• Proficiency in developing tools and automation to identify or verify security issues.
• Ability to communicate and advise on security design and implementation for complex security challenges.
• Familiarity with publicly available security test tools and techniques.
• An ability to read and understand C and/or C++ code. Assembly is a plus.

Preferred Qualifications:

• A public record of vulnerability research and discovery
• An understanding of low level security issues that may arise in hardware or kernel components and their implications
• An understanding of how hypervisors and paravisors work.

As a member of the MSRC team, you will play a vital role in enhancing the security of Microsoft infrastructure, products and services. You will have the responsibility to:

• Analyze critical security vulnerabilities reported by security researchers from around the world and provide guidance on remediation.
• Develop tools and techniques to discover and exploit vulnerabilities in Microsoft products and services.
• Conduct penetration testing on Microsoft hardware, devices, products, services, virtualization stacks and cloud infrastructure to identify and report security issues.
• Innovate in security mitigations and hardening to make Microsoft products and services more resilient to attacks.
• Gain insights from incoming bug trends to inform security research for the team, as well as influence the broader Microsoft security strategy.