Senior Security Engineer and Principal Security Engineer (Multiple Positions)
Core
Build reusable agents and tools to expedite and improve the consistency and quality of security reviews for new Windows and devices; review features and code for security defects and architectural risk.
Role type
Senior/Principal Security Engineer (Security Research & Automation)
Builds
Reusable security agents and automated tools for security reviews
Domain
Operating Systems Security / Native Application Security
Deliverable
production ML models | infrastructure
Required skills
vulnerability identification in operating systems, native (C/C++) application security, security research, bug exploitation, bypassing security mitigations, automated security tooling, code review for security defects, architectural risk assessment
Preferred skills
security research, vulnerability discovery, interacting with external security community and researchers
Technologies
C, C++, automated security tools, agents
Responsibilities
Build reusable agents and tools to expedite and improve the consistency and quality of security reviews; Review features and code for security defects and architectural risk using agents and automated tools; Be the security contact for teams building new innovative products and technologies in the next version of Windows and devices; Interact with the external security community and security researchers; Collaborate with product teams to improve security, and articulate the business value of security investments
Seniority
Senior/Principal, hands-on IC with research focus
