Senior Security Engineer

Position Overview

The Microsoft Windows Security team is recruiting a Senior Security Engineer to enhance the security of Windows products and devices using offensive security methods, vulnerability research, and development of scalable defensive measures. This team protects Windows operating systems for clients and servers used globally, conducting security design and code reviews, penetration tests, and vulnerability research while building defenses against evolving cyber threats.

In this capacity, you will discover and analyze complex security vulnerabilities and novel attack vectors within Windows. Responsibilities include developing proof-of-concept exploits, designing lasting mitigations for both specific vulnerabilities and broader classes of security challenges, and collaborating with Windows development teams to embed security into product architecture and design. You will leverage your advanced understanding of native code, operating system security, vulnerability research, and offensive security techniques.

Key Duties and Responsibilities

• Perform vulnerability research and offensive security assessments for Windows using approaches such as code auditing, fuzz testing, penetration testing, and exploits to detect weaknesses and complex security threats, followed by the design of sustainable defenses.
• Collaborate with internal and external security communities to stay updated on emerging threats and identify opportunities to enhance Windows security.
• Analyze product architecture, features, and native code through both manual and automated security review techniques to identify vulnerabilities and architectural risks.
• Create proof-of-concept exploit codes and scalable mitigation strategies addressing identified security issues and broader vulnerability categories.
• Develop reusable security tooling and automation solutions to increase the efficiency, consistency, and quality of security evaluations and vulnerability detection.
• Partner with Windows product engineering teams to integrate security into product designs and remediate detected vulnerabilities and risks.

Required Qualifications

• Master's degree in Statistics, Mathematics, Computer Science, or related discipline with at least 3 years of experience in security or a related field, or Bachelor’s degree with at least 4 years of equivalent experience.
• Hands-on experience in offensive security techniques such as penetration testing, vulnerability research, exploit development, or bypassing operating system defenses.
• Proven ability to identify vulnerabilities in operating systems and/or native C/C++ applications.

Preferred Qualifications

• Master’s degree with 6+ years of relevant experience or Bachelor’s degree with 8+ years in security or related technical fields.
• Minimum of 5 years’ experience in software or security engineering or related technical area.
• Documented success in security research with a focus on vulnerability discovery.
• Experience exploiting vulnerabilities and circumventing operating system security mitigations.
• Strong familiarity with Microsoft Windows architecture and internal operating system components.

Additional Information

The typical annual salary range for this role in Canada is CAD 114,400 to CAD 203,900. This position remains open for at least five days with continuous application acceptance until filled.

Microsoft is a committed equal opportunity employer that ensures non-discrimination across multiple protected characteristics and accommodates religious and disability-related needs during the application process.