Note: The job is a remote job and is open to candidates in USA. Microsoft is a global enterprise services company focused on securing digital technology platforms, devices, and clouds. The Principal Security Engineer will advise engineering teams and leadership on security initiatives across cloud, AI, and enterprise platforms, leading threat modeling, architecture reviews, security guidance, and AI-driven security assessments. The role also involves mentoring teams and improving security methodologies, tooling, and processes across regulated environments.
Responsibilities
- Partner with engineering teams to identify and mitigate security risks early in the development lifecycle through threat modeling, security design reviews, and architecture assessments for cloud and AI-powered services
- Drive secure-by-design improvements by developing security guidance, reference architectures, and practical remediation strategies that help teams address systemic security challenges and architectural anti-patterns
- Influence security outcomes across high-impact Microsoft services by working directly with engineers, architects, and product leaders to prioritize risks and accelerate security improvements
- Leverage AI and automation capabilities to scale security assessments, improve risk identification, and increase security coverage across complex product portfolios
- Investigate emerging technologies, cloud architectures, and AI workloads to uncover novel attack paths, security weaknesses, and opportunities to strengthen Microsoft's security posture
- Champion security excellence by mentoring engineering teams, enabling self-service security capabilities, and fostering secure development practices across the organization
- Contribute to the evolution of Microsoft's security assessment methodologies, tooling, and processes to improve the effectiveness, consistency, and scalability of security reviews
Skills
- Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 4+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection
- OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 6+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection
- OR equivalent experience
- Experience leading security strategy, architecture reviews, or security programs across multiple organizations or large-scale cloud services
- Experience designing or securing distributed systems, cloud platforms, APIs, identity solutions, or AI-enabled applications
- Knowledge of secure software development practices, common attack techniques, security controls, and risk mitigation strategies
- Proven track record identifying systemic security risks and driving organization-wide risk reduction initiatives
- Experience influencing senior engineering leadership and shaping security standards, guidance, or reference architectures
Company Overview
Company H1B Sponsorship