below marketmost similar roles pay hereabove market
This role pays more than
62%
of similar roles. Most pay
$166,480–$227,505
— the blue band above.
At the midpoint, this role pays about
$209k
versus about
$197k
for comparable roles.
Based on 240 similar postings.
Employer
About Microsoft
Microsoft Corporation is a global technology leader producing software, hardware, and cloud services including Windows, Office 365, Azure cloud platform, Xbox gaming, and Surface devices. Industry: Software & Cloud Computing
Microsoft currently has
694 open roles
on FindRole.
Listed pay typically runs
$119,800–$234,700
across 651 roles with salary data.
The Principal Security Engineer joins the Product Security Engineering team within the Regulated Industries Security Organization to secure critical services across healthcare, human resources, and legal affairs. In this role, you will serve as a trusted advisor to engineering teams, leading threat modeling, architecture reviews, and security design assessments for cloud and AI-powered services. You will build reference architectures, develop remediation strategies, and identify systemic security weaknesses to drive durable risk reductions. Key responsibilities include leveraging AI and automation to scale security assessments and investigating emerging cloud architectures to uncover novel attack paths. You must possess expertise in the software development lifecycle, large-scale computing, threat modeling, and cyber security to improve security outcomes across complex product portfolios and highly regulated environments.
What does a Security Engineer earn?
Median $193000 from 107 postings across 42 companies.
Perform threat modeling, security design reviews, and architecture assessments for cloud and AI-powered services.
Develop security guidance, reference architectures, and remediation strategies to address systemic architectural anti-patterns.
Partner with engineers and product leaders to prioritize risks and accelerate security improvements across high-impact services.
Utilize AI and automation to scale security assessments and increase coverage across complex product portfolios.
Investigate emerging technologies and AI workloads to identify novel attack paths and security weaknesses.
Mentor engineering teams to foster secure development practices and enable self-service security capabilities.
Evolve security assessment methodologies, tooling, and processes to improve the scalability of security reviews.
What we're looking for
Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field and 4+ years of relevant experience.
Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field and 6+ years of relevant experience.
Equivalent experience to the required degrees and years of experience.
Experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection.
Ability to pass the Microsoft Cloud background check upon hire and every two years thereafter.
Experience leading security strategy, architecture reviews, or security programs across multiple organizations or large-scale cloud services (preferred).
Experience designing or securing distributed systems, cloud platforms, APIs, identity solutions, or AI-enabled applications (preferred).
Knowledge of secure software development practices, common attack techniques, security controls, and risk mitigation strategies (preferred).
Azure
AWS
GCP
Python
C#
C++
Go
Rust
PowerShell
.NET
Entra ID
Active Directory
Windows
Linux
Cloud Security
Threat Modeling
Penetration Testing
Kernel Security
Networking Protocols
Zero Trust
Identity and Access Management
Go
Python
Java
C++
Rust
OAuth 2.0
OIDC
SAML
SCIM
PKI
SPIFFE
SPIRE
Service Mesh
Cryptography
Distributed Systems
Cloud IAM