Principal Security Engineer

Technology, Data & Digital · IT Infrastructure & Security · Cybersecurity · Cloud Engineering · Software Engineering

In short

The Principal Security Engineer will join the Azure Security DevSec team at Microsoft to secure cloud services, evaluate security posture, and drive secure-by-design improvements. This role involves deep dives into cloud-hosted service ecosystems, recommending mitigations, and leveraging AI/automation to scale security assessments and improve risk identification across Microsoft Azure.

Responsibilities

Perform security reviews and deep dives for cloud-hosted service ecosystems in Microsoft Azure.
Provide security expertise in areas like virtualization, memory safety (C/C++), Networking protocols, Cloud security, Kernel security.
Drive secure-by-design improvements by developing security guidance, reference architectures, and remediation strategies.
Innovate new approaches to solving security at cloud scale.
Serve as a strong technical communicator, leading stakeholder discussions and driving partnerships across Azure organizations.
Influence security outcomes by working with engineers, architects, and product leaders to prioritize risks and accelerate improvements.
Leverage AI and automation to scale security assessments and improve risk identification.
Champion security excellence by mentoring teams and fostering secure development practices.

Requirements

Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 4+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection.
OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 6+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection.
OR equivalent experience.
Ability to meet Microsoft, customer and/or government security screening requirements.
Must pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Desired Qualifications

Demonstrated hands-on experience with identifying and exploiting security vulnerabilities across cloud (Azure/AWS/GCP), identity (Entra ID / Active Directory), Windows and Linux endpoints, network.
Experience in customer-facing or consulting roles delivering security outcomes to executive audiences.
5+ years experience performing security assessments and penetration testing.
5+ years experience securing cloud computing environments across Azure/AWS/GCP.
5+ years of experience with coding or scripting in languages such as Python, C#, C++, Go, PowerShell, .NET, Rust, or other comparable programming languages, including building and maintaining security tooling.

Benefits

In-office work 3 days/week.
Travel less than 25%.
Potential eligibility for benefits and other compensation.
Access to detailed benefits and pay information via provided link.

Skills

PythonC#C++GoPowerShell.NETRustAzureAWSGCPEntra IDActive Directory

#Security Engineering#Security Assurance#Cloud Security#Azure Security#DevSecOps#Cyber Security#AI

About Microsoft

Empowering every person and organization on the planet to achieve more

Every company has a mission. What's ours? To empower every person and every organization to achieve more. We believe technology can and should be a force for good and that meaningful innovation contributes to a brighter world in the future and today. Our culture doesn’t just encourage curiosity; it embraces it. Each day we make progress together by showing up as our authentic selves. We show up with a learn-it-all mentality. We show up cheering on others, knowing their success doesn't diminish our own. We show up every day open to learning our own biases, changing our behavior, and inviting…

See all open jobs at Microsoft Read more about Microsoft Website