Microsoft
Senior Penetration Testing Engineer
$120K–$261K
Redmond, WA +8 · On-site · Senior · Full-time · Posted Oct 19, 2026
- Location
- Redmond, WA
Mountain View, CA
New York, NY
Atlanta, GA
Reston, VA
Boston, MA
Washington, DC
Fort Lauderdale, FL
Dallas, TX - Experience
- Required: 3+ years with a Master's Degree, or 4+ years with a Bachelor's Degree, in security or a related field; equivalent experience accepted. Preferred: 5+ years of hands-on penetration testing or red teaming.
- Education
- Master's Degree in Statistics, Mathematics, Computer Science, or related field; or Bachelor's Degree in those fields; or equivalent experience.
About the job
Conduct penetration tests on Microsoft services and AI-powered systems, identify and communicate attack paths, and help teams remediate vulnerabilities and scale security testing.
What you'll do
- Plan and run manual penetration tests across services, cloud infrastructure, identity, APIs, and applications; test AI applications, agents, MCP servers, and AI supply chains.
- Connect findings across security layers, explain priorities and business impact, and work with partners on fixes.
- Use AI agents for recon, triage, and regression testing with guardrails and human sign-off; share attack research through guidance and training.
What they ask for
- Master's Degree in Statistics, Mathematics, Computer Science, or related field and 3+ years of security or related experience; or Bachelor's Degree in those fields and 4+ years of such experience; or equivalent experience.
- Meet Microsoft, customer and/or government security screening requirements, including the Microsoft Cloud Background Check upon hire/transfer and every two years thereafter.
Nice to have
- 5+ years of hands-on penetration testing or red teaming across cloud, web and API, identity, and network; hands-on assessment of production or pre-production LLM applications or AI agents.
- Experience with named security tools, coding, AI architectures, regulatory frameworks, APT emulation or purple teaming; relevant certifications.
Pay
USD $119,800 - $234,700 per year (base salary); USD $160,200 - $261,000 per year (base salary)
Tools
Azure, AWS, GCP, Python, C#, Burp Suite Pro, Metasploit, Cobalt Strike
AI focus
Penetration-test LLM-powered and agent-based applications, MCP servers, and AI supply chains; use AI agents to support recon, triage, and regression testing with guardrails and human sign-off.
Model-written summary · the original posting is authoritative