Microsoft
Principal Security Engineer
$143K–$304K
United States · On-site · Principal · Full-time · Posted Aug 25, 2026
- Experience
- 4+ years with a master’s degree, or 6+ years with a bachelor’s degree, in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection; or equivalent experience.
- Education
- Master’s degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field; or bachelor’s degree in one of those fields; or equivalent experience.
About the job
Leads security reviews and risk-reduction initiatives for regulated cloud, AI, and enterprise services, while using AI and automation to scale security assessments.
What you'll do
- Conduct threat modeling, security design reviews, and architecture assessments; identify and mitigate security risks.
- Develop security guidance and reference architectures, and influence engineering teams to address systemic risks.
- Use AI and automation to scale assessments and improve security coverage; contribute to assessment methods, tools, and processes.
What they ask for
- Master’s degree in a listed or related field and 4+ years of relevant experience, or bachelor’s degree in a listed or related field and 6+ years of relevant experience, or equivalent experience.
- Meet Microsoft, customer, and/or government security screening requirements, including passing the Microsoft Cloud Background Check upon hire or transfer and every two years thereafter.
Nice to have
- Experience leading security strategy, architecture reviews, or programs across organizations or large-scale cloud services.
- Experience with distributed systems, cloud platforms, APIs, identity solutions, or AI-enabled applications; knowledge of secure development practices, attack techniques, controls, and risk mitigation.
Pay
USD $142,800 - $274,800 per year (base salary); USD $188,000 - $304,200 per year (base salary, San Francisco Bay area and New York City metropolitan area)
Tools
cloud, AI, APIs
AI focus
Uses AI and automation to scale security assessments, improve risk identification and coverage, and assess AI workloads and AI-enabled applications.
Model-written summary · the original posting is authoritative