Principal Software Engineer - Security And Privacy

Overview
Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
Microsoft's Customer Security and Trust (CST) organization in Corporate, External and Legal Affairs (CELA) Division has an immediate opening for a Principal Security Engineer role in our engineering group (CST-E). CST-E develops, deploys, and operates tools, services, and solutions critical for CST mission to protect our customers and promote global trust in Microsoft by ensuring compliance, enhancing Security and transparency, and leading the fight against cybercrime as part of Microsoft Digital Crimes Unit and other operations with global impact .
This role will be part of the CST-E Security and Privacy Engineering Team, contributing to strategic security initiatives within the organization and across CELA Division with the opportunity of bigger impact. You will contribute to strategic projects and assignments to help increase the security posture of cloud infrastructure and services, assessing Security and Privacy risks and contribute to improvements and remediation of issues.
This is a unique opportunity within Microsoft to work in a dynamic and collaborative team with impact across many services harvesting the power of the cloud, apply your Security and technical skills to empower analysts and investigators to keep our digital world safe for consumers and businesses across the globe.
A successful candidate will be passionate about security, risk assessment and mitigation, cloud computing and architecture, processes and automation necessary to strengthen the resiliency and security posture of our services and infrastructure.
Responsibilities

• Establishing collaboration with Engineering teams in CST and across CELA on new features, services, and updates to our products and services
• Participate in threat model reviews and help identify security flaws early in the design phase
• Foster onboarding and adoption of Security Development Lifecycle (SDL)
• Help design implementation of Defense in Depth and Zero Trust strategies while ensuring secure by design, security by default, and secure by deployment principles
• Lead security architecture reviews
• Provide guidance and recommendations for secure development
• Fix security issues in code or infrastructure
• Participate in code reviews to evaluate security risks and improvements
• Lead cloud incident response activities as they occur
• Promote security awareness and provide training and good coding practices
• Help design, implement, and maintain IAM technologies to ensure audit and Privacy compliance, and drive automation wherever possible
• Supports operational Security and security incidents as well as security reviews and reporting
• Contribute to, and establish a strategic view of risk to our services and iterative and consistent security improvements

Qualifications
Required/Minimum Qualifications:

• Bachelor's Degree in Computer Science, or related technical discipline AND 6+ years technical engineering experience with software development experience with focus on security or related position
  • OR equivalent experience.

• 5+ years of experience with C# and .Net platform including design and implementation of cloud solutions
• 5+ years of experience with Azure services, including containers (AKS), App services, Azure Storage technologies, and best practices to secure these services
• 2+ years of working as part of an engineering team, or as a partner of the engineering team, to implement secure development lifecycle practices

Other Requirements:

• Citizenship & Citizenship Verification: This position requires verification of U.S. citizenship due to citizenship-based legal restrictions. Specifically, this position supports United States federal, state, and/or local United States government agency customers and is subject to certain citizenship-based restrictions where required or permitted by applicable law. To meet this legal requirement, citizenship will be verified via a valid passport.

Additional or Preferred Qualifications:

• In-depth knowledge of common security vulnerabilities and associated mitigations
• CISSP Certification and / or SANS Security Training
• Understanding of cryptography
• Experience with Containers and Azure Kubernetes including security best practices
• Deep Experience implementing Networking Security, API management, Identity and Access management
• Practical experience as part of red / blue team exercises
• 2 + years of experience with cross group and interpersonal skills, with the ability to articulate the business need for security improvements

Software Engineering IC5 - The typical base pay range for this role across the U.S. is USD $133,600 - $256,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $173,200 - $282,200 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the Accommodation request form.
Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.