Senior Security Engineer, Microsoft Red Team

Microsoft

Confirmed live yesterday High trust

Remote

Quick summary

Work type: Remote
Location: Remote
Salary: $119,800–$234,700 / yr
Posted: 2 days ago
Freshness: Confirmed live yesterday
Closes: Apr 25, 2027

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $186k

This role $177k

$106k $248k

below market most similar roles pay here above market

This role pays less than 54% of similar roles. Most pay $153,875–$217,700 — the blue band above. At the midpoint, this role pays about $177k versus about $186k for comparable roles.

Based on 240 similar postings.

Employer

About Microsoft

Microsoft Corporation is a global technology leader producing software, hardware, and cloud services including Windows, Office 365, Azure cloud platform, Xbox gaming, and Surface devices. Industry: Software & Cloud Computing

Microsoft currently has 687 open roles on FindRole.

Listed pay typically runs $119,800–$234,700 across 646 roles with salary data.

Most-posted roles

View all roles at Microsoft

At a glance

TL;DR · Senior Security Engineer, Microsoft Red Team

Role Posting Log in to save

The Senior Security Engineer - Microsoft Red Team joins the Microsoft Red Team organization to support the CyberShield program. This role involves executing end-to-end adversary emulation operations against Microsoft’s internal estate and select external customer environments. The engineer will perform initial access, privilege escalation, lateral movement, and persistence while developing custom tooling, implants, and tradecraft to evade modern defenses. A primary focus is advancing agentic, AI-driven red team operations by operating and improving autonomous agents for reconnaissance and exploitation. Key technical requirements include proficiency in Python, C#, C++, Go, PowerShell, .NET, or Rust. The role addresses the business problem of shifting red teaming from point-in-time human engagements to a software-driven, continuous model across cloud, identity, network, endpoint, and hardware security domains.

What does a Security Engineer earn?

Median $193000 from 111 postings across 44 companies.

See salary data

Skills

Red Teaming Adversary Emulation AI Agents Python C# C++ Go PowerShell .NET Rust Azure AWS GCP Entra ID Active Directory Windows Linux MITRE ATT&CK TIBER-EU CBEST DORA Penetration Testing

What you'll do

Execute end-to-end red team operations including initial access, privilege escalation, and persistence against internal and customer environments.
Develop custom tooling, implants, and tradecraft to evade modern defenses and emulate advanced adversaries.
Conduct agentic red team operations using AI agents for reconnaissance, vulnerability discovery, and exploitation.
Discover and exploit vulnerabilities across cloud, identity, network, and hardware layers to create realistic attack paths.
Work directly with customers to communicate technical findings and build trusted security relationships.
Prototype and improve tools and agents that scale offensive emulation and vulnerability discovery.
Collaborate with internal teams to convert red team findings into product hardening and improved defender readiness.
Contribute to operational standards, playbooks, and tradecraft for CyberShield engagements.

What we're looking for

Master's Degree in Statistics, Mathematics, Computer Science, or related field and 3+ years of experience in security or related field.
Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field and 4+ years of experience in security or related field.
Equivalent experience to the degree and years of experience requirements.
Ability to provide proof of citizenship or U.S. permanent residency for export control regulations.
Ability to pass Microsoft background checks and Microsoft Cloud background checks.
2+ years of experience executing red team or adversary emulation operations against enterprise or cloud environments (preferred).
4+ years of experience identifying and exploiting security vulnerabilities across cloud, identity, endpoints, network, or hardware (preferred).
Active U.S. Government TS//SCI clearance with full-scope polygraph (preferred).

Save