Senior Security Engineer(Hybrid) in Cambridge

The Microsoft Offensive Research & Security Engineering (MORSE) team is looking for a Senior Security Engineer to help secure Microsoft’s products and devices. MORSE is responsible for securing Microsoft’s operating systems and platform technologies, cloud platforms, and virtualisation technologies that support the daily needs of over a billion customers worldwide.

In this role, you will work across the discovery and mitigation of security vulnerabilities — identifying weaknesses in systems, understanding their impact, and helping drive protections that improve the security of Microsoft platforms at scale. You will partner with engineers across Windows, Azure, and platform infrastructure to deliver security improvements and influence the way systems are designed and built. This role is well suited to engineers who enjoy deep systems work, solving complex problems, and delivering high impact security outcomes.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities:

• Drive identification and analysis of security vulnerabilities across operating system and platform components, including design review, code review, fuzzing, and variant analysis.
• Develop and influence mitigations and protections that reduce risk across platforms, improving resilience against entire classes of vulnerabilities.
• Collaborate with engineering teams to integrate security into the development lifecycle, influencing design decisions and improving secure engineering practices.
• Contribute to the development and scaling of security tooling, detection capabilities, or analysis techniques that enable broader coverage and earlier detection of vulnerabilities.
• Partner across organisations to translate security findings into systemic improvements and measurable security outcomes.
• Stay current on attacker techniques, emerging vulnerability classes, and industry trends, applying this knowledge to improve Microsoft’s security posture.
• Provide technical leadership within and across teams, contributing to direction setting, problem decomposition, and delivery of complex security initiatives.

Qualifications:

Required Qualifications:

• Significant experience in security-related elements of software engineering or in another security-related field.
• Hands on experience with systems level programming languages such as C, C++, or Rust.
• Ability to meet Microsoft, customer and/or government security screening requirements are required for this role.

Preferred Qualifications:

• Public or internal track record of relevant security research.
• Understanding of operating system security fundamentals, including kernel or low level platform components.
• Experience performing vulnerability research, including code review, fuzzing, reverse engineering, or exploit development.
• Experience developing or applying mitigations, such as memory safety protections, sandboxing, or platform hardening techniques.

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances.

If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.