Microsoft
Security Researcher
$102K–$219K
Redmond, WA · On-site · Full-time · Posted Oct 2, 2026
- Experience
- Minimum: 1+ year with a master’s degree, or 2+ years with a bachelor’s degree, in the specified relevant areas; equivalent experience accepted. Preferred alternatives: 3+ years with a master’s degree or 5+ years with a bachelor’s degree; equivalent experience accepted.
- Education
- Master’s or bachelor’s degree in Statistics, Mathematics, Computer Science, Computer Security, or a related field; or equivalent experience.
About the job
Conduct offensive security research and build AI-driven systems to discover, validate, and help remediate vulnerabilities across Microsoft products, cloud services, and open-source software.
What you'll do
- Research and analyze vulnerabilities, emerging threats, attack techniques, and systemic security weaknesses.
- Develop automation, AI-driven systems, and tooling for vulnerability discovery, triage, and remediation.
- Collaborate with engineering and security teams, and publish technical findings or influence software projects.
What they ask for
- Master’s degree in a listed or related field plus 1+ year of relevant experience; or bachelor’s degree in a listed or related field plus 2+ years; or equivalent experience.
- Meet applicable Microsoft, customer, and/or government security screening requirements, including the Microsoft Cloud Background Check.
Nice to have
- Doctorate; or master’s degree plus 3+ years of relevant experience; or bachelor’s degree plus 5+ years; or equivalent experience.
- Experience in vulnerability research, exploit development, reverse engineering, or offensive security; publicly disclosed CVEs or advisories; or participation in recognized security competitions or programs.
Pay
USD $102,100 - $202,200 per year (base salary); USD $133,800 - $219,200 per year (base salary)
Tools
MDASH
AI focus
Build AI-driven security systems and workflows, including a multi-model agentic platform for autonomous vulnerability discovery, validation, and exploitability proof.
Model-written summary · the original posting is authoritative