Principal Security Researcher - RedSea at Microsoft

Herzliya, Tel-Aviv District, Israel -

Full Time

Start Date

Immediate

Expiry Date

17 Mar, 26

Salary

0.0

Posted On

17 Dec, 25

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Security Research, Cryptography, HSMs, TPMs, Security Protocols, Secure Boot, OS Security, Windows Internals, Offensive Security Research, Vulnerability Research, Network Security Research, Threat Modeling, Detection, Technical Leadership, Mentoring, Communication

Industry

Software Development

Description

Overview Join a dynamic team focused on developing innovative security solutions to protect sensitive data and critical assets. We are building a next-generation security product from the ground up, redefining how organizations safeguard their most valuable resources. We are seeking a senior security researcher, who will lead the security aspects of core product features from research to design to execution. This will include new security solutions. To increase the bar, collaborate with engineers, product managers, and security experts to define requirements, architect solutions, and deliver high-quality code. Responsibilities Analyze and research security controls, attackers’ techniques and anomalous patterns Work together with the engineering team to develop the code to support the research findings Collaborate with other teams across Microsoft and come up with innovative ideas which should be part of future versions of the product Collaborate with product, engineering, and security teams to define and develop advanced security solutions. Lead research, design, and implementation of core features in alignment with system architecture and engineering requirements. Assess security threats and develop mitigation strategies to ensure robust software security. Mentor team members on security best practices and software development techniques. Stay current with the latest security trends, methodologies, and technologies. Qualifications You have at least 10+ years of security research experience with demonstrated impact on real-world products, systems, or platforms. Deep expertise in one or more security domains such as cryptography, HSMs/TPMs, security protocols, secure boot, OS security, or strong expertise in Windows Internals. Preferred Requirements Experience in offensive security research, vulnerability research, or real-world attack analysis. Network security research experience (e.g., protocols, traffic analysis, threat modeling, detection). Recognized contributor to the security community (e.g., research papers, blogs, talks, open-source, or books). Excellent communication and interpersonal skills,with the ability to clearly explain complex technical concepts to both technical and non-technical audiences. Demonstrated technical leadership, including mentoring, setting technical direction, or leading cross-team initiatives. B.Sc. or M.Sc. in Computer Science, Software Engineering,or equivalent practical experience (e.g., service in an elite technology unit in the IDF). This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Responsibilities

The Principal Security Researcher will analyze security controls and collaborate with engineering teams to develop code based on research findings. They will lead the research, design, and implementation of core features while assessing security threats and developing mitigation strategies.