below marketmost similar roles pay hereabove market
This role pays more than
50%
of similar roles. Most pay
$154,450–$216,000
— the blue band above.
At the midpoint, this role pays about
$177k
versus about
$185k
for comparable roles.
Based on 240 similar postings.
Employer
About Microsoft
Microsoft Corporation is a global technology leader producing software, hardware, and cloud services including Windows, Office 365, Azure cloud platform, Xbox gaming, and Surface devices. Industry: Software & Cloud Computing
Microsoft currently has
648 open roles
on FindRole.
Listed pay typically runs
$119,800–$234,700
across 624 roles with salary data.
The Senior Security Assurance Engineer joins the Marketing Security Risk & Compliance team to lead complex security reviews and threat modeling for marketing services, platforms, and data. This role involves evaluating technical architectures, identifying material security risks, and partnering with engineering teams to drive remediation across cloud services, data platforms, and artificial intelligence solutions. You will perform security reviews, analyze data flows, and apply Secure Development Lifecycle practices to identify design weaknesses. Key responsibilities include building automated evidence collection, using cloud telemetry, and utilizing AI-assisted analysis to modernize security assurance. Required skills include coding in languages like C, C++, C#, Java, JavaScript, or Python. You will also manage tenant migrations and assess security controls across identity, networking, and data protection within complex cloud environments.
Lead end-to-end security reviews and threat-modeling engagements for complex marketing services and data environments.
Analyze technical architectures, data flows, trust boundaries, and cloud configurations to identify design weaknesses and control gaps.
Evaluate security evidence and provide risk-based recommendations for remediation and technical requirements.
Translate security findings into actionable engineering work and track remediation through to closure.
Build and operationalize automation to accelerate evidence collection, risk identification, and reporting workflows.
Identify recurring architectural weaknesses and translate them into reusable secure design patterns and guidance.
Validate automated and AI-assisted findings to distinguish material security risks from false positives.
Provide technical guidance and mentoring to other Security Assurance Engineers to improve review quality.
What we're looking for
Bachelor's Degree in Computer Science or related technical field and 4+ years of technical engineering experience with coding in languages like C, C++, C#, Java, JavaScript, or Python.
Master's Degree in Computer Science or related technical field and 6+ years of technical engineering experience with coding in languages like C, C++, C#, Java, JavaScript, or Python (preferred).
Bachelor's Degree in Computer Science or related technical field and 8+ years of technical engineering experience with coding in languages like C, C++, C#, Java, JavaScript, or Python (preferred).
Experience conducting or leading security architecture reviews, threat modeling, application security assessments, cloud security assessments, or Secure Development Lifecycle activities (preferred).
Experience assessing cloud architectures and security controls across identity, networking, data protection, applications, infrastructure, secrets management, logging, monitoring, and DevOps (preferred).
Experience identifying security vulnerabilities, architectural weaknesses, control gaps, and other material technical risks (preferred).
Experience making risk-based technical recommendations in complex or ambiguous engineering environments (preferred).
Experience working with engineering teams to translate security findings into actionable remediation and validating evidence through closure (preferred).
Threat Modeling
Cloud-Native Architecture
Python
Java
Go
Swift
Kubernetes
Container Orchestration
Distributed Systems
Artificial Intelligence
Machine Learning
Security Review
Multi-tenant System Design
Platform as a Service
Software as a Service
Python
Go
C#
TypeScript
C
C++
JavaScript
Azure
Terraform
Bicep
ARM Templates
Event-driven Architecture
Workflow Orchestration
Distributed Systems
infrastructure-as-code
Threat Modeling
Identity Security
Microsoft Entra