Principal Security Engineer United States Washington Redmond

Job description

Drive identification and analysis of security vulnerabilities across operating system and platform components, including design review, code review, fuzzing, and variant analysis Develop and influence mitigations and protections that reduce risk across platforms, improving resilience against entire classes of vulnerabilities Advocate for security with engineering teams to integrate security into the development lifecycle, influence design decisions and improve secure engineering practices. Devise and advocate for broadly applicable solutions. Contribute to the development and scaling of security tooling, detection capabilities, or analysis techniques that enable broader coverage and earlier detection of vulnerabilities Partner across organizations to translate security findings into systemic improvements and measurable security outcomes Provide technical leadership within and across teams, contributing to direction setting, problem decomposition, and delivery of complex security initiatives. Mentor and coach peers on new approaches and best practices. Coordinate across teams and leads resolution of vulnerabilities, threat attacks, and security issues. Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in security or related field OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 6+ years experience in security or related field OR equivalent experience. Public or internal track record of relevant security research Understanding of operating system security fundamentals, including kernel or low level platform components Experience performing vulnerability research, including code review, fuzzing, reverse engineering, or exploit development Experience developing or applying mitigations, such as memory safety protections, sandboxing, or platform hardening techniques 4+ years experience in security-related elements of software engineering or in another security-related field 4+ years experience with systems level programming languages such as C, C++, or Rust