This role pays more than
72%
of similar roles. Most pay
$159,000–$213,725
— the shaded band above.
At the midpoint, this role pays about
$209k
versus about
$186k
for comparable roles.
Based on 240 similar postings.
Employer
About Microsoft
Microsoft Corporation is a global technology leader producing software, hardware, and cloud services including Windows, Office 365, Azure cloud platform, Xbox gaming, and Surface devices. Industry: Software & Cloud Computing
Microsoft currently has
588 open roles
on FindRole.
Listed pay typically runs
$119,800–$234,700
across 570 roles with salary data.
Principal Security Engineer joins the Microsoft Red Team organization as a lead operator for the CyberShield program. This role focuses on transitioning red teaming from human-led engagements to a software-driven, continuous model powered by agentic, AI-driven operations. You will plan and execute end-to-end adversary emulation across cloud, identity, network, endpoint, hardware, and operational security domains. Key responsibilities include developing custom tooling and implants, designing autonomous agents for reconnaissance and exploitation, and serving as a technical authority to brief customer leaders on findings. The role requires expertise in Python, C#, C++, Go, PowerShell, .NET, or Rust to build offensive tools. You will address the challenge of emulating advanced persistent threats while integrating AI-driven automation to scale vulnerability discovery and harden defenses against real-world tactics across diverse enterprise environments.
What does a Security Engineer earn?
Median $192000 from 80 postings across 39 companies.
Execute end-to-end red team operations including initial access, privilege escalation, lateral movement, and reporting for Microsoft and its customers.
Design and direct AI agents to autonomously perform reconnaissance, vulnerability discovery, and exploitation at scale.
Develop custom tooling, implants, and tradecraft to evade modern defenses and emulate advanced adversaries.
Identify and exploit vulnerabilities across cloud, identity, network, hardware, and operational security layers.
Serve as a technical lead for customers by briefing executives and translating findings into actionable defensive guidance.
Prototype and productionize tools and techniques that scale offensive emulation and feed requirements to the AI platform team.
Establish operational standards, playbooks, and mentor other senior operators on the red team.
What we're looking for
A Master's degree plus 4 years of experience in security, or a Bachelor's degree plus 6 years of experience, or equivalent experience.
Ability to pass Microsoft Cloud background checks and additional customer or government-directed vetting.
Experience planning and leading red team or adversary emulation operations against enterprise or cloud environments (preferred).
Hands-on experience building, directing, or operating AI-driven or agentic offensive security tooling in real operations (preferred).
8+ years of experience identifying and exploiting vulnerabilities across cloud, identity, endpoint, network, and hardware (preferred).
Experience designing multi-agent or autonomous systems using large language models for offensive security (preferred).
6+ years of experience with coding/scripting in languages like Python, C#, C++, Go, PowerShell, .NET, or Rust (preferred).
Active U.S. Government TS/SCI clearance with full-scope polygraph (preferred).
Vulnerability Research
Code Review
Fuzzing
Reverse Engineering
Exploit Development
C
C++
Rust
Memory Safety
Sandboxing
Platform Hardening
Windows
Azure
Security Tooling
Identity and Access Management
Entra
SIEM
Threat Modeling
Anomaly Detection
Cybersecurity
AI
Automation
Software Development Lifecycle
Data Science
Incident Response
Risk Assessment
Information Technology