Senior​/Principal Software Engineer - Red Team

Position: Senior/Principal Software Engineer - Microsoft Red Team
Job d:

Location:

United States, Washington, Redmond Salary: USD $119,800 - $234,700 per year

Employment type:

Full-Time Work site: 3 days / week in-office

Role type:
Individual Contributor Travel:
Less than 25%
Profession:
Software Engineering Discipline:
Software Engineering Company:
Microsoft Overview The  CISO organization represents the voice of the customer and the executive security buyer, focusing on enterprise security strategy, risk posture, and real-world security needs across industries. This team partners closely with product and engineering to ensure Microsoft Security solutions align with how organizations actually defend against threats, translating complex security challenges into actionable priorities and influencing how security is delivered  plays a critical role in shaping end-to-end security narratives, aligning product capabilities with customer outcomes, and driving trust with executives making high-stakes security decisions.

Cyber Shield is the Microsoft Red Team program that extends our red team capability beyond Microsoft’s own estate to select external customers. Our mandate is to shift red teaming from point-in-time, human-led engagements to a software-driven, continuous model powered by agentic, AI-driven red teaming. Cyber Shield works across Microsoft and customer environments spanning cloud, identity, network, endpoint, hardware, and operational security domains.

We are looking for Senior and Principal Security Software Engineers to design and build the offensive platform, tooling, and capabilities that power Cyber Shield operations. You will partner with red team operators and security engineers to automate adversary tactics, techniques, and procedures; develop capabilities for autonomous reconnaissance, vulnerability discovery, exploitation, and post-exploitation; and turn emerging tradecraft into reliable systems that operate across Microsoft and customer environments.

These roles will focus on one or more of the following areas: exploit development, implant development, and agent platform development. You will provide technical leadership across disciplines, mentor other engineers, and translate operational lessons into scalable capabilities that improve how Cyber Shield discovers and demonstrates security risk.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities Analyze data from Microsoft and customer engagement environments to identify potential security weaknesses and breach points, then partner with operational teams to execute targeted attacks that simulate real-world threat scenarios.

Design and build offensive tooling, implants, and agent-platform capabilities that automate reconnaissance, vulnerability discovery, exploitation, post-exploitation, and adversary emulation across Microsoft and customer environments.

Develop tools and techniques to scale and accelerate offensive emulation and vulnerability discovery

Analyze simulated adversary tactics and communications, enriching our defensive tactics and threat intelligence

Advocate for security change through building partnerships and clearly communicating impact of risks

Mentor and Guide more Software Engineers as they develop their skills and abilities

Successfully operate in uncertain and novel environments, and identify unknown risk areas

Qualifications

Required qualifications:

Bachelor's Degree in Computer Science or related technical field AND 4+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience.

Other Requirements:

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:

Microsoft Cloud Background Check:
This position will be required to pass the Microsoft Cloud Background Check upon hire/transfer and every two years thereafter.

Preferred Qualifications:

Master's Degree in Computer Science or related technical field AND 8+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java,…