Principal Software Engineers

What you'll do

• Design and improve systems to enhance security across software supply chains and open-source ecosystems.
• Analyze dependencies, vulnerabilities, and potential malware to ensure the integrity of software components.
• Apply program analysis techniques like static/dynamic analysis and sandboxing to assess code behavior.
• Develop and operate scalable cloud-based pipelines for large-scale scanning and data processing.
• Implement supply chain integrity practices including SBOM, SLSA, and artifact signing.
• Conduct threat detection and security research involving malware and vulnerability analysis.
• Integrate security capabilities into developer tools like GitHub, Visual Studio, and CI/CD systems.
• Evaluate and improve detection methods to adapt to evolving security threats.

What we're looking for

• Bachelor's degree in Computer Science or a related technical field is required, or equivalent experience.
• At least 6 years of technical engineering experience coding in languages such as C, C++, C#, Java, JavaScript, or Python.
• Ability to pass the Microsoft Cloud background check every two years.
• Experience designing and shipping production backend services, platforms, or data pipelines is preferred.
• Experience with software supply chain security and open-source ecosystems including dependency, vulnerability, or malware analysis is preferred.
• Experience applying program analysis techniques such as static/dynamic analysis, sandboxing, deobfuscation, and behavioral analysis is preferred.
• Experience building or operating large-scale cloud-based scanning, detection, or data-processing pipelines, preferably on Azure, is preferred.
• Experience with supply chain security standards like SBOM and SLSA, along with CI/CD integration, is preferred.