Microsoft
Principal Penetration Tester
$143K–$304K
Redmond, WA +1 · On-site · Principal · Full-time · Posted Nov 2, 2026
- Location
- Redmond, WA
United States - Experience
- 4+ years with a related master's degree; 6+ years with a related bachelor's degree; or equivalent experience. Preferred: 6+ years in specified security-related areas and coding/scripting; 3+ years leading a penetration testing team.
- Education
- Master's Degree in Statistics, Mathematics, Computer Science, or related field; OR Bachelor's Degree in those fields; OR equivalent experience.
About the job
Leads hands-on penetration testing of Microsoft datacenter systems and infrastructure, guiding the team’s strategy and helping drive vulnerability remediation.
What you'll do
- Conduct penetration tests and adversary emulation across applications, cloud, networks, hardware, and critical-infrastructure OT systems; identify vulnerabilities and demonstrate attack paths and impact.
- Set testing priorities, methodologies, engagement scope, and technical guidance; lead team operations and track timely remediation and reporting.
- Collaborate with security and partner teams, communicate risks to technical and executive audiences, mentor others, and apply AI and automation to scale reconnaissance, discovery, and testing.
What they ask for
- Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years’ experience in security or related field; OR Bachelor's Degree in those fields AND 6+ years’ experience; OR equivalent experience.
- Meet Microsoft, customer, and/or government security screening requirements, including passing the Microsoft Cloud background check upon hire/transfer and every two years thereafter.
- Citizenship verification with a valid passport is required due to citizenship-based legal restrictions.
Nice to have
- 6+ years’ experience in identifying security vulnerabilities, software development lifecycle, large-scale computing, modeling, cyber security, and anomaly detection; and 6+ years’ experience coding or scripting.
- Familiarity with OWASP, MITRE ATT&CK, and NIST; penetration-testing team leadership; relevant offensive security or OT/ICS certifications; LLM and RAG techniques; KQL, cloud, OT/ICS security, Power BI, or Azure DevOps experience.
Pay
USD $142,800 - $274,800 per year (base pay); USD $188,000 - $304,200 per year (base pay)
Tools
C#, Python, C++, Go, PowerShell, .NET, Rust, Azure
AI focus
Apply AI and automation to scale reconnaissance, discovery, and testing; preferred experience includes open-source and open-weight Large Language Models (LLMs), chunking, embeddings, and RAG techniques.
Model-written summary · the original posting is authoritative