Senior Security Researcher - Vulnerability Research & Mitigations

Do you enjoy the challenge of discovering and analyzing vulnerabilities in software and services to understand how they work and how to fix them? Are you excited by the idea of analyzing real-world exploits and researching new attack techniques? Are you passionate about developing new tools and techniques to scale vulnerability research to meet real-world demands? Do you want to be part of an inclusive and collaborative team that invests in the growth and success of one another?

The Microsoft Security Response Center (MSRC) is responsible for detecting, protecting against, and responding to threats that affect Microsoft’s products and services. We are looking for a motivated and experienced Senior Security Researcher to join our team.

As part of MSRC, our Vulnerability & Mitigations Team is responsible for analyzing vulnerabilities found in Microsoft’s products and services to determine their root cause, severity, and security impact. This analysis plays a critical role in shaping the security updates that are deployed to customers around the world.

Our research projects cover a wide range of topics, including vulnerability discovery and automation, exploit and vulnerability mitigations, exploit development, operating system security (Windows and Linux), virtualization security, and hardware vulnerabilities and mitigations.

This is a unique opportunity to make a meaningful impact on improving security for customers worldwide while tackling interesting, real-world security challenges. You will work alongside talented security researchers in a supportive and collaborative environment that encourages innovation, continuous learning, and professional growth.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees, we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day, we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.

Responsibilities

As a member of the MSRC team, you will play a vital role in enhancing the security of Microsoft products and services. You will have the opportunity to:

• Analyze critical security vulnerabilities reported by security researchers from around the world and provide guidance on remediation.
• Detect, reverse engineer and patch live exploits reported to MSRC.
• Use state of the art AI tooling to find and analyze vulnerabilities at scale.
• Develop new tools and techniques to improve vulnerability analysis workflows.
• Innovate in security mitigations to make Microsoft products and services more resilient to attacks.
• Gain insights from incoming bug trends to inform security research for the team, as well as influence the broader Microsoft security strategy.
• Work with and learn from experts across Microsoft and grow your career in security in a motivated and supportive team.

Qualifications

Required Qualifications:

• Bachelor's Degree in Computer Science or related technical field AND hands on technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience.
• Experience in security research on Windows/Linux systems.
• An ability to read, understand and debug C and/or C++ code.
• Proficiency in developing tools and automation to identify or verify security issues, and scaling analysis workflows using AI and traditional methods.
• Knowledge of software security vulnerabilities, how they can be exploited, and how they can be prevented.
• Ability to initiate, lead and deliver prototypes, systems improvements and/or research.

Other Requirements:

Candidates must be able to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:

• Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Security Research IC4 - The typical base pay range for this role across United Kingdom is £ 74,700.00 - £ 122,600.00 per year. Certain roles may be eligible for benefits and other compensation.

Find additional benefits and pay information here:

https://careers.microsoft.com/v2/global/en/corporate-pay/united-kingdom-corporate-pay.html

Security Research IC4 - The typical base pay range for this role across United Kingdom is £ 74,700.00 - £ 122,600.00 per year. Certain roles may be eligible for benefits and other compensation.

Find additional benefits and pay information here:

https://careers.microsoft.com/v2/global/en/corporate-pay/united-kingdom-corporate-pay.html

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.