Senior Software Engineer

Are you looking for an opportunity to defend the productivity of millions worldwide against malicious individuals and organizations? Continually curious about security threats, innovative techniques and technologies in the rapidly developing landscape of intrusion detection security? 

Our intrusion detection team uses deep knowledge of the attacker landscape and rich telemetry from our sensors to develop intrusion detection system and generate custom detections and alerts, ensuring that Microsoft 365 services are well equipped to quickly respond to threats identified in their unique environments to protect customer data in every workload. As part of this team, you will be developing and building advanced and novel detection capabilities for attacker techniques, tactics and procedures, developing machine learning systems to automate generation of alerts, conducting threat hunting, and performing systems security analysis and threat profiles. 

 
Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. 

Required Qualifications:

• Bachelor's Degree in Computer Science or related technical field AND technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
  • OR equivalent experience.
• Experience in software development lifecycle, large-scale computing, modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), AI/ML security research.

Other Requirements:

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings:

• Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Preferred Qualifications:

• Master's Degree in Computer Science or related technical field AND technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
  • OR equivalent experience.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the Accommodation request form.

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.

#M365CORE

• You will design, implement, maintain, and drive improvements to M365 intrusion detection system.  
• You will be responsible for data analysis on large data sets, develop new detections, design and develop Machine Learning alerting and define collected security signals. 
• You will implement detection as a code by designing, developing and maintaining data intensive applications, and writing Spark jobs using functional programming techniques to process extensive data from diverse sources, including Kubernetes control plane and network traffic, Azure cloud services, and Linux endpoint data. 
• You will collaborate with security analysts, incident response teams, and other stakeholders to refine detection strategies and improve overall security posture. 
• You will protect M365 services by providing guidance and recommendation to keep Linux and Kubernetes services hardened against attacks.