Microsoft
Senior Security Engineer - Microsoft Red Team
$120K–$261K
United States · On-site · Senior · Full-time · Posted Oct 27, 2026
- Experience
- 3+ years with a relevant master's degree; 4+ years with a relevant bachelor's degree; or equivalent experience. Preferred experience includes 2+ years in red team/adversary emulation and 2+ years coding or scripting; 4+ years vulnerability identification and exploitation.
- Education
- Master's Degree in Statistics, Mathematics, Computer Science, or related field; OR Bachelor's Degree in those fields; OR equivalent experience.
About the job
Execute end-to-end red team engagements for Microsoft and select customers, and operate and improve AI-driven agents that discover, chain, and exploit security weaknesses.
What you'll do
- Conduct adversary emulation operations, from initial access through objective completion and reporting, across Microsoft and customer environments.
- Develop tools, implants, and tradecraft; discover and exploit vulnerabilities across application, cloud, identity, network, hardware, and operational security layers.
- Operate and improve AI red team agents with appropriate guardrails, collaborate with customers and internal teams, and communicate findings.
What they ask for
- Master's degree in Statistics, Mathematics, Computer Science, or related field and 3+ years of security or related experience; OR bachelor's degree in those fields and 4+ years of security or related experience; OR equivalent experience.
- Provide citizenship or qualifying status documentation for export-control eligibility; citizenship will be verified with a valid passport, with other documents applicable to lawful permanent residents, refugees, and asylees.
- Meet Microsoft, customer and/or government security screening requirements, including passing the Microsoft and Microsoft Cloud background checks upon hire/transfer and every two years thereafter.
Nice to have
- Experience executing red team or adversary emulation operations, using or building AI-driven offensive security tooling, and identifying and exploiting vulnerabilities.
- Experience coding or scripting, customer engagement, defensive security, MITRE ATT&CK, regulated red team frameworks, or security-community contributions; active U.S. Government TS//SCI clearance with full-scope polygraph is preferred.
Pay
USD $119,800 - $234,700 per year (base pay); USD $160,200 - $261,000 per year (base pay)
Tools
Python, C#, C++, Go, PowerShell, .NET, Rust, Azure
AI focus
Conduct agentic red team operations using AI agents for reconnaissance, vulnerability discovery, exploitation, and post-exploitation; evaluate and improve autonomous and semi-autonomous agents, applying guardrails, oversight, and human-in-the-loop controls.
Model-written summary · the original posting is authoritative