Drimva

Microsoft

Principal Penetration Tester

$143K–$304K

Redmond, WA +1 · On-site · Principal · Full-time · Posted Nov 2, 2026

Location
Redmond, WA
United States
Experience
4+ years with a related master's degree; 6+ years with a related bachelor's degree; or equivalent experience. Preferred: 6+ years in specified security-related areas and coding/scripting; 3+ years leading a penetration testing team.
Education
Master's Degree in Statistics, Mathematics, Computer Science, or related field; OR Bachelor's Degree in those fields; OR equivalent experience.

About the job

Leads hands-on penetration testing of Microsoft datacenter systems and infrastructure, guiding the team’s strategy and helping drive vulnerability remediation.

What you'll do

  • Conduct penetration tests and adversary emulation across applications, cloud, networks, hardware, and critical-infrastructure OT systems; identify vulnerabilities and demonstrate attack paths and impact.
  • Set testing priorities, methodologies, engagement scope, and technical guidance; lead team operations and track timely remediation and reporting.
  • Collaborate with security and partner teams, communicate risks to technical and executive audiences, mentor others, and apply AI and automation to scale reconnaissance, discovery, and testing.

What they ask for

  • Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years’ experience in security or related field; OR Bachelor's Degree in those fields AND 6+ years’ experience; OR equivalent experience.
  • Meet Microsoft, customer, and/or government security screening requirements, including passing the Microsoft Cloud background check upon hire/transfer and every two years thereafter.
  • Citizenship verification with a valid passport is required due to citizenship-based legal restrictions.

Nice to have

  • 6+ years’ experience in identifying security vulnerabilities, software development lifecycle, large-scale computing, modeling, cyber security, and anomaly detection; and 6+ years’ experience coding or scripting.
  • Familiarity with OWASP, MITRE ATT&CK, and NIST; penetration-testing team leadership; relevant offensive security or OT/ICS certifications; LLM and RAG techniques; KQL, cloud, OT/ICS security, Power BI, or Azure DevOps experience.

Pay

USD $142,800 - $274,800 per year (base pay); USD $188,000 - $304,200 per year (base pay)

Tools

C#, Python, C++, Go, PowerShell, .NET, Rust, Azure

AI focus

Apply AI and automation to scale reconnaissance, discovery, and testing; preferred experience includes open-source and open-weight Large Language Models (LLMs), chunking, embeddings, and RAG techniques.

Model-written summary · the original posting is authoritative

First seen Oct 16, 2026 · Last verified Nov 5, 2026 (UTC)