Senior Security Assurance Engineer at Microsoft

Redmond, Washington, United States -

Full Time

Start Date

Immediate

Expiry Date

20 Feb, 26

Salary

0.0

Posted On

22 Nov, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Security Compliance, Threat Modeling, Cyber Security, Automation, Software Engineering, CI/CD, DevSecOps, Security Testing Tools, Vulnerability Scanning, Penetration Testing, Programming, Cloud Environments, AI/ML Techniques, Application Security, Defensive Security, Offensive Security

Industry

Software Development

Description

Evaluate and certify applications/services/Infra before deployment to ensure security compliance against risks. Monitor and analyze emerging threats and security trends to continuously update and strengthen security baselines. Be able to establish tooling and engineering practices to detect, respond, and harden defenses. Automation & Software Engineering: Design and build production-grade security automation frameworks and custom tools to handle a high volume of application onboarding and security checks. Establish new engineering solutions and practices to rapidly detect, respond, and harden defenses across the application landscape. Integrate security assessments into CI/CD and DevSecOps pipelines to enable continuous security assurance at scale. Collaboration & Communication: Work with cross-functional engineering teams to maintain and evolve security controls and policies throughout SDLC Partner with service owners, development teams, and operations to provide clear, actionable guidance. Deliver detailed assessment reports and recommendations Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 3+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 4+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection OR equivalent experience. These requirements include, but are not limited to the following specialized security screenings: Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 6+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection (enterprise experience) OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 8+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection (enterprise experience) OR equivalent experience 4+ years experience with security testing tools (static/dynamic analysis, vulnerability scanning, penetration testing). 4+ years experience in common vulnerabilities, and mitigation techniques. 2+ years experience in Programming/scripting skills (e.g., C#/Python) and experience building automation platforms and security tooling. 2+ years experience in cloud environments (e.g. Azure) Experience applying AI/ML techniques to security analytics, threat detection, or automation (e.g., anomaly detection, automated triage, or predictive modeling). Prior experience in a large-scale application security review environments. Experience in defensive and offensive security concepts.

Responsibilities

Evaluate and certify applications and services for security compliance before deployment. Monitor emerging threats and establish engineering practices to enhance security defenses.