Security Researcher

Teknik, data och digitalt · IT-infrastruktur och säkerhet · Cybersäkerhet · Artificiell intelligens · Datavetenskap

I korthet

Microsoft Security Research is hiring a Senior Security Researcher to conduct advanced AI attacks, develop scalable red teaming tools, and translate findings into robust defenses. This role focuses on securing AI systems, including LLMs, against prompt injection, data exfiltration, and agent abuse, requiring a strong security background and deep understanding of AI.

Ansvarsområden

Lead the design and execution of simulations to make AI safer and protect customers.
Develop and execute hands-on attacks against AI systems, including prompt injection, indirect prompt injection (XPIA), multi-turn attacks, multimodal injection, guardrail bypass, sensitive data exfiltration, agentic and tool-use abuse, and data/model attacks.
Build scalable AI red teaming tooling and automation (custom attack harnesses and evaluation frameworks).
Partner with product, engineering, Responsible AI, and detection teams to translate findings into mitigations.
Evaluate the effectiveness of AI defenses and provide strategic recommendations.
Conduct deep research into emerging AI attacker techniques and map them to frameworks like MITRE ATLAS and OWASP Top 10 for LLM Applications.
Deliver executive-level briefings, technical reports, and prioritized recommendations.
Act as a technical leader, shaping AI simulation methodology, mentoring team members, and driving innovation in Security for AI.

Krav

Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field OR Master's Degree AND 3+ years of experience in software development, large-scale computing, threat analysis, cybersecurity, or vulnerability research.
OR Bachelor's Degree AND 4+ years of experience in software development, large-scale computing, threat analysis, cybersecurity, or vulnerability research.
OR equivalent experience.
Ability to meet Microsoft, customer, and/or government security screening requirements.
Microsoft Cloud Background Check required.

Önskade kvalifikationer

Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years of experience in software development, large-scale computing, threat analysis, cybersecurity, or vulnerability research.
OR Master's Degree AND 6+ years of experience in software development, large-scale computing, threat analysis, cybersecurity, or vulnerability research.
OR Bachelor's Degree AND 8+ years of experience in software development, large-scale computing, threat analysis, cybersecurity, or vulnerability research.
OR equivalent experience.
6+ years of experience in security research and/or AI/ML security.
A security background: experience finding and exploiting real vulnerabilities (e.g., penetration testing, red teaming, vulnerability research, application security) with an adversarial mindset.
Solid, practical understanding of how modern AI works: LLMs, prompting, retrieval-augmented generation (RAG), fine-tuning, and agentic / tool-using systems.
Hands-on experience and familiarity with agentic AI systems, red teaming harnesses, and AI tooling (e.g., building/working with agents, tool-using LLMs, orchestration and evaluation frameworks, LLM APIs, attack harnesses).
Demonstrated hands-on experience attacking AI systems: prompt injection (direct and indirect), jailbreaks, guardrail bypass, data exfiltration, or agent abuse, in research or professional settings.
Python skills for building attack automation, evaluation harnesses, and research tooling.
Familiarity with AI security and safety frameworks such as MITRE ATLAS, OWASP Top 10 for LLMs and Responsible AI principles.
Ability to translate offensive findings into practical defenses and communicate clearly with engineers and executives.
Contributions to AI security research, publications, CTFs, or open-source.

Förmåner

The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year.
For specific work locations in San Francisco Bay area and New York City metropolitan area, the base pay range is USD $160,200 - $261,000 per year.
Certain roles may be eligible for benefits and other compensation.
Applications accepted on an ongoing basis until the position is filled.

Färdigheter

Python

#AI Security#Security Research#LLM Security#Red Teaming#Vulnerability Research#Cybersecurity#Prompt Injection#Responsible AI#Microsoft Security

Om Microsoft

Empowering every person and organization on the planet to achieve more

Every company has a mission. What's ours? To empower every person and every organization to achieve more. We believe technology can and should be a force for good and that meaningful innovation contributes to a brighter world in the future and today. Our culture doesn’t just encourage curiosity; it embraces it. Each day we make progress together by showing up as our authentic selves. We show up with a learn-it-all mentality. We show up cheering on others, knowing their success doesn't diminish our own. We show up every day open to learning our own biases, changing our behavior, and inviting…

Se alla lediga jobb hos Microsoft Läs mer om Microsoft Webbplats