{"id":4034119,"url":"https://alion.io/job/microsoft-senior-security-engineer-2","title":"Senior Security Engineer","company":{"id":18,"name":"Microsoft","domain":"microsoft.com","url":"https://alion.io/company/microsoft","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Eightfold","truth_index":{"grade":"B","score":84,"open_postings":471,"ghost_share":0.006,"stale_share":0.597,"repost_share":0.04,"time_to_fill_p50_days":29,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sunnyvale, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":119800,"max":234700,"currency":"USD","period":"year","gross":null,"usd_annual":234700},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomaly Detection","optional":false},{"name":"Machine Learning","optional":false},{"name":"Threat Modeling","optional":false},{"name":"DLP","optional":true}],"status":"live","first_seen_at":"2026-11-09T21:25:50Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-10T19:33:01Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"OverviewTeam Purpose\nThe Microsoft AI Infrastructure Information Security team protects the data, systems, services, and technology ecosystem that support AI development and operations at scale. You will help manage security and privacy risks across products, enterprise technologies, partners, suppliers, and third-party services by evaluating security maturity, identifying systemic threats, and providing technical guidance. Working across engineering, product, business, and security teams, you will help build scalable assurance practices that improve visibility, mitigate vulnerabilities, and support secure technology adoption.\nRole Summary\nAs a Senior Security Engineer in the Microsoft AI Infrastructure Information Security team, you will lead large-scale security assessments of complex and high-risk applications, cloud services, artificial intelligence and machine learning services, application programming interfaces (APIs), developer platforms, infrastructure providers, and other third-party technologies. You will analyze evidence from multiple sources, lead architecture and design reviews, develop threat models, prioritize complex security issues, and drive mitigations that balance security and operational needs. You will also align stakeholders around security priorities and dependencies and advance the methodologies, automation, reusable patterns, and technical guidance used to provide security assurance at scale.\nThis opportunity will allow you to deepen your leadership in application, cloud, and enterprise security, advance scalable security-assessment and automation strategies, and expand your influence across multidisciplinary teams and technology partners.\nMicrosoft Culture Statement\nMicrosoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.\nResponsibilities\nLead large-scale, end-to-end security assessments of complex technologies and integrations, including architecture and design reviews, threat modeling, penetration testing, vulnerability analysis, and control validation across applications, cloud services, APIs, AI services, developer platforms, and infrastructure providers. \nAnalyze complex issues and technical evidence from multiple sources to identify trust boundaries, attack paths, data exposure, identity and privilege risks, software supply-chain weaknesses, and less common security threats; make informed tradeoffs and drive systemic issues to resolution. \nEvaluate products and services against security baselines, assess the impact of identified risks, and work with engineering, operations, research, and technology-provider leads to define and implement appropriate remediation or compensating controls. \nProvide security and architectural guidance throughout the development lifecycle, ensure relevant security design and development practices are in place, and develop reusable requirements, secure patterns, and best practices that prevent recurring issues. \nBuild connections and agreements across engineering, product, business, partner, and security teams to clarify priorities and dependencies, communicate complex risk, incorporate customer and partner feedback, and escalate blocking issues when needed. \nPlan security analysis for large feature areas and multi-stakeholder reviews by accounting for product schedules, milestones, dependencies, risk assessments, and stakeholder effort while adapting plans as findings and business needs evolve. \nLead clear reporting on findings, recommendations, risk, control effectiveness, and program outcomes; monitor and respond to security events, potential vulnerabilities, exposures, and policy-compliance issues. \nCreate and drive adoption of mitigations, assessment methodologies, self-service resources, and readiness frameworks that improve security posture and enable informed decisions about third-party technologies. \nArchitect and implement security tooling, automated workflows, and standardized processes, including appropriate uses of machine learning and generative AI, to expand coverage, improve vulnerability identification, validate controls, and reduce operational overhead. \nMaintain expertise across application security, cloud security, identity and access management, data protection, vulnerability management, incident response, and enterprise security tools, and share that expertise through guidance, coaching, and technical forums. \nEmbody our culture and values\nQualifications\nRequired Qualifications:\nMaster's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 3+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detectionOR Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 4+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection\nOR equivalent experience. \n\nOther Requirements:\nAbility to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:\nMicrosoft Cloud Background Check:\n- This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.\nPreferred Qualifications\nMaster's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 6+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection (enterprise experience)OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 8+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection (enterprise experience)\nOR equivalent experience. \n\nExperience independently leading complex security assessments from architecture review through risk identification, remediation, and control validation. \nExperience building or scaling third-party security, vendor security, supply chain security, or comparable security-assurance programs in a large-scale technology environment. \nStrong knowledge of modern application, SaaS, and cloud architectures, APIs, identity federation, OAuth or OpenID Connect, privileged access, data protection, and software supply-chain security. \nExperience designing scalable software, automation, or security tooling that improves assessment coverage, control validation, attack-surface identification, or continuous security monitoring. \nExperience with on-premises and multicloud environments or enterprise security technologies such as data loss prevention (DLP), data security posture management (DSPM), SaaS security posture management (SSPM), or endpoint detection and response (EDR). \nAbility to communicate complex technical security risks clearly, build agreement across diverse perspectives, and influence engineering, business, and technology-provider leaders. \nSecurity Assurance IC4 - The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $160,200 - $261,000 per year.\nCertain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:\nhttps://careers.microsoft.com/us/en/us-corporate-pay\nThis position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.\nMicrosoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.","description_format":"text","description_chars":8875,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Platforms (IaaS & PaaS)","Gaming Consoles","Information Security","Developer Tools"],"lifecycle":[{"event":"open","at":"2026-11-10T19:33:01Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 6,957 · green card filings: 2,767","filings_12m":6957,"filings_prev_12m":10319,"green_card_filings_12m":2767,"median_offered_wage_usd":167541,"route":null,"cap_exempt":false,"checked_at":"2026-11-10T11:34:35+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":625}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":29,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-11-10T21:15:44Z"},"pay":{"stated_usd_annual":234700,"is_top_pay":true},"html_url":"https://alion.io/job/microsoft-senior-security-engineer-2","json_url":"https://alion.io/job/microsoft-senior-security-engineer-2.json","meta":{"generated_at":"2026-11-10T21:15:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14793,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":18},"rest":"https://alion.io/mcp/rest/get_company?id=18"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmicrosoft-senior-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmicrosoft-senior-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmicrosoft-senior-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/microsoft-senior-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmicrosoft-senior-security-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4034119}},{"tool":"search_jobs","arguments":{"company":"microsoft.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4034119},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}