Principal Software Engineer
Core
Define and drive technical direction for software supply chain protection capabilities that detect and prevent threats before they reach developer projects or production environments.
Role type
Principal Software Engineer (Security & Supply Chain)
Builds
Large-scale distributed systems analyzing open-source packages, code behavior, provenance, and trust signals across ecosystems in real time.
Domain
Cybersecurity / Software Supply Chain / Cloud Infrastructure
Required skills
Software supply chain security, open-source package ecosystem analysis, program analysis (static/dynamic), large-scale cloud data pipelines, SBOM/SLSA/provenance standards, threat detection, malware/vulnerability research, developer tool integration (via careerplan.io/jobs/1970393556874231-principal-software-engineer-at-microsoft)
Preferred skills
AI-assisted threat detection, artifact signing (Sigstore), deobfuscation, behavioral analysis
Technologies
Azure, C, C++, C#, Java, JavaScript, Python, Rust, Go, npm, PyPI, NuGet, Maven, Cargo
Responsibilities
Design and operate large-scale distributed systems for real-time analysis of open-source packages and code behavior; Develop new security primitives for package risk assessment and malicious dependency detection; Provide hands-on technical leadership across architecture, design reviews, and implementation; Integrate security solutions with developer tools
Seniority
Principal, hands-on IC with strategic direction
