Principal Security Engineer

Job description

Conduct vulnerability research and offensive security assessments across Windows, using techniques such as code auditing, fuzzing, penetration testing, and exploitation to identify vulnerabilities and no complex security risks, and develop durable defenses. Engage with internal and external security communities to understand emerging vulnerabilities, attack techniques, and opportunities to strengthen Windows securityvel attack vectors. Review product architecture, features, and native code to identify security vulnerabilities and architectural risks using manual and automated security analysis techniques. Develop proof-of-concept exploits and scalable mitigations that address identified vulnerabilities and broader classes of security issues. Design and build reusable security tools and automation that improve the efficiency, consistency, and quality of security reviews and vulnerability discovery. Partner with Windows product engineering teams to incorporate security into product design, resolve Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in security or related field OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in security or related field OR equivalent experience. Hands-on experience with offensive security techniques such as penetration testing, vulnerability research, exploit development, or bypassing operating-system security mitigations Experience identifying vulnerabilities in operating systems and/or native (C/C++) applications. Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 6+ years experience in security or related field OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 8+ years experience in security or related field OR equivalent experience. 5+ years of experience in software engineering, security engineering, or a related technical field. Demonstrated experience in security research, particularly vulnerability discovery. Experience exploiting vulnerabilities and bypassing security mitigations in operating systems.