This role pays more than
69%
of similar roles. Most pay
$162,375–$216,000
— the shaded band above.
At the midpoint, this role pays about
$209k
versus about
$189k
for comparable roles.
Based on 240 similar postings.
Employer
About Microsoft
Microsoft Corporation is a global technology leader producing software, hardware, and cloud services including Windows, Office 365, Azure cloud platform, Xbox gaming, and Surface devices. Industry: Software & Cloud Computing
Microsoft currently has
598 open roles
on FindRole.
Listed pay typically runs
$119,800–$234,700
across 586 roles with salary data.
As a Principal Security Engineer within the Product Security Engineering team of the Regulated Industries Security Organization, you will serve as a trusted advisor to engineering teams and leadership. You will be responsible for identifying and mitigating security risks early in the development lifecycle through threat modeling, architecture reviews, and security design guidance. Your daily work involves developing reference architectures, defining remediation strategies, and investigating emerging technologies like cloud architectures and AI workloads to uncover novel attack paths. To achieve these goals, you will leverage AI-driven capabilities and automation to scale security assessments across complex product portfolios. You will focus on securing high-impact services in regulated environments, specifically addressing challenges within healthcare, human resources, and corporate sectors while promoting secure-by-design improvements for cloud and AI-powered platforms.
What does a Security Engineer earn?
Median $185250 from 84 postings across 39 companies.
Perform threat modeling, security design reviews, and architecture assessments for cloud and AI services.
Develop security guidance, reference architectures, and remediation strategies to address systemic architectural anti-patterns.
Partner with engineering leaders to prioritize risks and accelerate security improvements across high-impact products.
Utilize AI and automation to scale security assessments and increase coverage across complex portfolios.
Investigate emerging technologies and AI workloads to identify novel attack paths and security weaknesses.
Mentor engineering teams and enable self-service capabilities to foster secure development practices.
Evolve security assessment methodologies, tooling, and processes to improve the scalability of security reviews.
What we're looking for
Master's degree in a relevant field and 4+ years of experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection.
Bachelor's degree in a relevant field and 6+ years of experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection.
Equivalent experience to the specified degree and years of experience requirements is acceptable.
Must be able to pass the Microsoft Cloud background check upon hire and every two years thereafter.
Experience leading security strategy, architecture reviews, or security programs across multiple organizations or large-scale cloud services (preferred).
Experience designing or securing distributed systems, cloud platforms, APIs, identity solutions, or AI-enabled applications (preferred).
Knowledge of secure software development practices, common attack techniques, security controls, and risk mitigation strategies (preferred).
Proven track record identifying systemic risks and influencing senior leadership to shape security standards (preferred).
C
C++
C#
Java
JavaScript
Python
Azure Virtual Desktop
Windows 365
client-engineering
Test Automation
Performance Measurement
Observability
Monitoring
Diagnostics
Identity and Access Management
Entra
SIEM
Threat Modeling
Anomaly Detection
Cybersecurity
AI
Automation
Software Development Lifecycle
Data Science
Incident Response
Risk Assessment
Information Technology