Principal Penetration Tester

Job d:

Location:

United States, Washington, Redmond Salary: USD $142,800 - $274,800 per year

Employment type:

Full-Time Work site: 3 days / week in-office

Role type:
Individual Contributor Travel:
Less than 25%
Profession:
Security Engineering Discipline:
Penetration Testing Company:
Microsoft Overview Join  Cloud Operations + Innovation (CO+I), the organization behind the technology and infrastructure that powers Microsoft’s cloud. Within CO+I, the Trusted Cyber Engineering (TCE) team is at the forefront of ensuring the security of our global operations.

We are seeking a highly skilled security engineer to join our team dedicated to driving cutting-edge security innovation. You will test physical and logical security systems that keep Microsoft’s global datacenter running, from cloud services and networks to hardware and operational technology for critical infrastructure such as power, cooling, and building management systems. As part of our team, you’ll provide guidance on team priorities, tactics, and methodologies.

You will educate, empower, and inspire fellow cyber defenders, peers, and strategic partners. Our focus is collaboration as we perform penetration testing and ensure a high rate of issue resolution working very closely with our partners. You will be a direct hands-on individual contributor and a technical lead for our penetration testing function with the ability to help shape the team and team’s strategy as we continue to mature our penetration testing team’s capability and growth.

While there is a preference for candidates who can work from our Redmond, WA office three days per week, we welcome qualified candidates who may not be able to meet this preference.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities Leads and participates in comprehensive penetration testing efforts across all layers of services including applications, cloud, network, hardware and critical infrastructure operational technology (OT) systems. Identifies security vulnerabilities, performs end-to-end adversary emulation within approved rules of engagement for multiple areas of responsibility with an ability to come up to speed on new targets and unidentified patterns without direction.

Operates in uncertain, challenging, and novel environments and execute offensive and defensive security operations. Identifies unknown risk areas and leverages expertise to appropriately handle them. Builds relationships to enable streamlined and efficient communication and collaboration, advocating for security change across the organization.

Provides strategic guidance to teams on priorities, tactics, evaluation strategies, and development of methodologies. Chains findings into attack paths that demonstrate operational and business impact.

Organizes and directs the team focused on engagement rules, scoping, executive risk communications and technical guidance for operations. Leads the rhythm of business across team to ensure remediation of findings is completed according to the defined SLA; reporting and all communications are delivered on time.

Creates high-quality executive level verbal and written presentations advocating for and outlining process of penetration testing, explaining technical information to non-technical audiences, as well as present data driven reporting tracking operations, explaining impact, risks, vulnerabilities, system information and remediation plans with…