Principal Security Engineer - Microsoft Canada, Vancouver

Position summary

The Microsoft Windows Security team is looking for a Principal Security Engineer to help secure Windows products and devices through offensive security, vulnerability research, and the development of scalable security mitigations. The Windows Security team helps protect Windows client and server operating systems used by customers and businesses worldwide. The team performs security design and code reviews, penetration testing, and vulnerability research while developing defenses that strengthen Windows against evolving cybersecurity threats.

In this role, you will identify and investigate complex security vulnerabilities and novel attack vectors across windows, develop proof-of-concept exploits, and design durable mitigations for individual vulnerabilities and broader classes of security issues. You will apply deep knowledge of native code, operating system security, vulnerability research, and offensive security techniques while partnering with Windows engineering teams to incorporate security into product architecture and design.

Your impact

As part of Microsoft Canada careers, your daily responsibilities will focus on advancing product defenses and driving vulnerability discovery through several core duties:

• Conduct vulnerability research and offensive security assessments across Windows, using techniques such as code auditing, fuzzing, penetration testing, and exploitation to identify vulnerabilities and novel attack vectors.
• Engage with internal and external security communities to understand emerging vulnerabilities, attack techniques, and opportunities to strengthen Windows security.
• Review product architecture, features, and native code to identify security vulnerabilities and architectural risks using manual and automated security analysis techniques.
• Develop proof-of-concept exploits and scalable mitigations that address identified vulnerabilities and broader classes of security issues.
• Design and build reusable security tools and automation that improve the efficiency, consistency, and quality of security reviews and vulnerability discovery.
• Partner with Windows product engineering teams to incorporate security into product design and resolve complex security risks.

Requirements

Candidates seeking jobs in Vancouver must meet the minimum qualifications or hold equivalent experience to be considered for these education jobs Vancouver opportunities:

• Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in security or related field OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 6+ years experience in security or related field OR equivalent experience.
• Hands-on experience with offensive security techniques such as penetration testing, vulnerability research, exploit development, or bypassing operating-system security mitigations.
• Experience identifying vulnerabilities in operating systems and/or native (C/C++) applications.

The team also looks at additional or preferred qualifications for applicants looking at Microsoft Canada jobs:

• Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 8+ years experience in security or related field OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 12+ years experience in security or related field OR equivalent experience.
• 5+ years of experience in software engineering, security engineering, or a related technical field.
• Demonstrated experience in security research, particularly vulnerability discovery.
• Experience exploiting vulnerabilities and bypassing security mitigations in operating systems.
• Familiarity with Microsoft Windows architecture and operating system internals.

Benefits

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations, and ordinances. Assistance with religious accommodations and/or reasonable accommodations due to a disability during the application process is available.