Senior Software Engineer – Security

Share job

Engage team members are at the forefront of driving AI applications and copilot adoption to make communication and information sharing easy and authentic. Our work supports top challenges for our customers, including digital safety, trusted security standards, and deep analytics to help our customers maximize reach, reduce inefficiencies, and create a thriving organizational culture. We would love to have you join the team driving innovation, connection, and community for our valued global customers. #VivaEngage

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

• Bachelor's Degree in Computer Science or related technical field AND 7+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or TypeScript
  • OR equivalent experience.
• 7+ years of experience in application Security engineering/Privacy engineering.
  
• Experience with application security standards such as OWASP ASVS/Top 10, CWE 25.
  
• Experience with common security libraries, security controls, and common security flaws.

Other Requirements:

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings:

• Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Preferred Qualifications/Attributes:

• Experience Security and Privacy threat modeling new features.
  
• Outstanding collaboration and partnership skills, with proven ability to drive results across teams.
  
• Understanding of Responsible AI, Privacy and Compliance regulations such as GDPR, CPRA, SOC 2, ISO27k and others.
  
• Familiarity with web proxies such as Burp, OWASP ZAP or Fiddler.

• Privacy and Security assessments of platform, data and clients, through code reviews and automation.
• Implementing Privacy, Responsible AI and Security controls and checkpoints to detect and prevent issues early in the software development lifecycle.
• Work with engineering and product teams in the design phase of products and features, conducting threat modeling and performing security architecture and design reviews.
• Implementing defense in depth mechanisms to prevent Security and Privacy vulnerabilities.