Jobs in the United States

25+ jobs

Save this search

Added 14 hours ago
Senior Security Research Engineer
Referral Board
United States
The Elastic Security Endpoint Protections team researches, designs, and builds the visibility and prevention capabilities at the core of Elastic Defend, our endpoint and SIEM security…
Added 15 hours ago
Senior Security Research Engineer
Elastic
United States
The Elastic Security Endpoint Protections team researches, designs, and builds the visibility and prevention capabilities at the core of Elastic Defend, our endpoint and SIEM security…
Added 17 hours ago
Sr Security Engineer, Leo Security
Amazon
Herndon, VA · Arlington, VA
We are looking for a senior security engineer to join the founding cohort of the Engineering and R&D team within Leo Infrastructure and IP Security. The team defends the manufacturing…
Added 19 hours ago
Global Red Team AI Engineer, Analyst
MUFG Bank, Ltd.
Jersey City, NJ
…background and practical coding experience, enabling them to develop offensive security skills while contributing to risk reduction across the…
Added 1 day ago
Senior AI Security Researcher
NVIDIA Corporation
South District, IL · North District, IL
Demonstrated experience of 5+ years in AI safety/security and offensive cybersecurity.
Added 1 day ago
Senior Cybersecurity AI Solutions Engineer
NVIDIA Corporation
North District, IL
We are seeking a Cybersecurity AI solutions Engineer to be part of the backbone of networking security innovation. In this role as part of your time, you will architecture design, deploy,…
Added 3 days ago
Senior Cyber Security Application Penetration Testing Engineer
Wells Fargo
CHANDLER, AZ
Wells Fargo are seeking a highly motivated and skilled Senior Cyber Security Application Penetration Testing Engineer to join our Technology Cybersecurity department. In this technical…
Added 3 days ago
Senior Offensive Security Engineer
Unity Technologies SF
Remote, United States
…what matters most to fix. You will work closely with Product Security, Infrastructure Security, Security Operations, and engineering teams, and you will help build the tooling and…
Added 3 days ago
Sr. Application Security Engineer / Ethical Hacker
Sherwin-Williams
Cleveland, OH
The Senior Application Security Engineer position is responsible for planning and performing manual penetration testing of traditional and AI-enabled applications, identifying and…
Added 3 days ago
AI Red Team Lead Engineer
U.S. Bank
Irving, TX
The AI Red Team Lead Engineer leads the execution and evolution of offensive security activities focused on AI/ML systems, platforms, and integrations, in addition to traditional enterprise…
Added 3 days ago
Principal Attack Engineer, AI/LLM
Horizon3
Remote, United States
You will operate at the intersection of company strategy and technical direction. You will shape the vision for AI/LLM offensive capabilities, partner with senior leadership on major…
Added 4 days ago
Sr Security Operations (SecOps) Engineer
Apple
Austin, TX
We are looking for an experienced Senior Security Operations (SecOps) Engineer to help define and drive the security strategy for applications, cloud infrastructure, and engineering…
Added 4 days ago
Customer Support Engineer
Bugcrowd
Remote, United States
Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help…
Added 4 days ago
Security Engineer - Devices
Somana
New York City, NY
Somana builds compute hardware and edge devices in-house for physical AI. We're looking for a senior Security Engineer to own security across the full lifecycle of that hardware - from…
Added 5 days ago
Malware Reverse Engineer, Senior
Booz Allen Hamilton_United States
Fort Meade, MD
…exploitation, defensive, and IT logging process experience to execute offensive cyber operations that inform our nation’s most critical security…
Added 5 days ago
Senior Security Software Engineer, Advanced Security
General Motors LLC
Warren, MI · Austin, TX
General Motors’ Advanced Security Engineering team develops advanced security capabilities to help secure GM and reduce real security exposure. We leverage artificial intelligence (AI)…
Added 5 days ago
M
Senior Security Engineer - Microsoft Red Team
Microsoft
United States
- $119,800 to $261,000 USD / year
We are looking for a Senior Security Engineer to serve as an operator on CyberShield engagements. You will execute adversary emulation operations end-to-end and help advance agentic,…
Added 5 days ago
Senior Product Manager (Advanced Network Security Services)
Palo Alto Networks, Inc.
United States
As a Senior Product Manager, you will define and launch all-new network security services to defend customers against automated, AI-driven attackers. You will own the product vision,…
Added 5 days ago
U
Sr Staff Security Engineer - Engineer
Uber
Seattle, WA · Sunnyvale, CA
- $267,000 to $297,000 USD / year
Senior Staff Security Engineer - Supply Chain, Offensive & AI Security
Added 5 days ago
GenAI Senior Security Engineer, Red Team
Google
Seattle, WA · Austin, TX · Washington, DC
As a Generative AI Senior Security Engineer on the Content Adversarial Red Team (CART) who is part of a broader cross-team collaborative effort focused on frontier safety, you will lead…
Added 6 days ago
Senior Security Engineer, Agentic Red Team, DeepMind
Google
New York, NY
Share Senior Security Engineer, Agentic Red Team, DeepMind
Added 6 days ago
Sr Sales Engineer, Chicago
LevelBlue LLC
Chicago, IL
The Sr. Sales Engineer should be technology and solution advisors with pragmatic experience in a particular security domain. These sales engineers will act in many ways as solution…
Added 6 days ago
Staff Product Manager, Agentic Data Platform
Horizon3
New York City, NY · San Francisco, CA
…performance, data freshness, consistency, and scalable access to offensive security…
Added 6 days ago
TB
Mainframe and Web Application Security Senior Engineer - Senior Penetration Tester
Truist Bank
Charlotte, NC · Greensboro, NC · Richmond, VA · Atlanta, GA · Raleigh, NC
- $140,000 to $180,000 USD / year
Maintains current knowledge of mainframe attack techniques, security controls, platform changes, offensive security practices, and relevant industry threats.
Added 6 days ago
Senior Security Engineer, Agentic Red Team, DeepMind
DeepMind
Mountain View, CA · New York, NY
As a Senior Security Engineer on the Agentic Red Team, you will be the primary technical executor of adversarial engagements. You will work with product builders, identifying architectural…

Microsoft

Senior Security Engineer - Microsoft Red Team

United States

$119,800 to $261,000 USD / year

Apply About employer

Applications open in a new tab.

Job details

Pay: $119,800 to $261,000 USD / year
Apply by: Apr 25, 2027
Posting language: English
Posted: Oct 27, 2026

Original job description

Overview

The Cloud & AI organization accelerates Microsoft's mission to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers' heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world.

Are you passionate about emulating the world's most determined adversaries, and about teaching machines to do it alongside you? Join the Microsoft Red Team (MRT) organization, where we emulate real-world advanced persistent threats to ensure Microsoft, and the customers who depend on us, are prepared to face and respond to any adversary.

CyberShield is the MRT program that extends our red team capability beyond Microsoft's own estate to select external customers. Our mandate is to shift red teaming from point-in-time, human-led engagements to a software-driven, continuous model powered by agentic, AI-driven red teaming. CyberShield operators work across Microsoft's own environment and customer environments spanning cloud, identity, network, endpoint, hardware, and operational security domains, and partner closely with Microsoft's adversary hunting organization to present a unified front to the customers we defend together.

We are looking for a Senior Security Engineer to serve as an operator on CyberShield engagements. You will execute adversary emulation operations end-to-end and help advance agentic, AI-driven red team operations by operating, evaluating, and improving autonomous and semi-autonomous agents that discover, chain, and exploit weaknesses. You will work directly with customer security teams, collaborate with experienced engineers across MRT, and contribute the tradecraft, tooling, and operational judgment needed to improve how the team operates at scale.

Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.

Responsibilities

Execute CyberShield red team operations end-to-end, including initial access, privilege escalation, lateral movement and pivoting, persistence, objective completion, and reporting, against Microsoft's own environment and select external customer environments, using real-world adversary tactics, techniques, and procedures to validate detection, investigation, and response.
Develop custom tooling, implants, and tradecraft to evade modern defenses and emulate the capabilities of advanced adversaries.
Conduct agentic red team operations using AI agents for reconnaissance, vulnerability discovery, exploitation, and post-exploitation, while applying appropriate guardrails, oversight, and human-in-the-loop controls.
Discover and exploit vulnerabilities across application, cloud, identity, network, hardware, and operational security layers, chaining findings into realistic attack paths that demonstrate business impact.
Work directly with customers during engagements, communicating technical findings clearly and building trusted relationships with customer security teams.
Prototype and improve tools, agents, and techniques that scale offensive emulation and vulnerability discovery, and provide feedback to our offensive AI platform engineering team based on experience in real environments.
Collaborate with Blue Teams, GHOST, MSTIC, and internal Microsoft service teams to convert findings into product hardening and improved defender readiness.
Contribute to operational standards, playbooks, and tradecraft for CyberShield engagements, and share expertise with other operators and specialists across MRT.
Advocate for security change across Microsoft and its customers by building partnerships and clearly communicating the impact of risk.
Embody our Culture and Values.

Qualifications

Required Qualifications:

Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in security or related field
OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in security or related field
OR equivalent experience.

Other Requirements:

Citizenship & Citizenship Verification: This role will require access to information that is controlled for export under export control regulations, potentially under the U.S. International Traffic in Arms Regulations or Export Administration Regulations, the EU Dual Use Regulation, and/or other export control regulations. As a condition of employment, the successful candidate will be required to provide either proof of their country of citizenship or proof of their U.S. permanent residency or other protected status (e.g., under 8 U.S.C. 1324b(a)(3)) for assessment of eligibility to access the export controlled information. To meet this legal requirement, and as a condition of employment, the successful candidate’s citizenship will be verified with a valid passport. Lawful permanent residents, refugees, and asylees may verify status using other documents, where applicable.
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:
Microsoft Cloud Background Check: This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Preferred Qualifications:

2+ years of experience executing red team or adversary emulation operations against enterprise or cloud environments.
Hands-on experience using, building, or operating AI-driven or agentic offensive security tooling.
Active U.S. Government TS//SCI clearance with full-scope polygraph is preferred, enabling immediate work with highly sensitive customer environments.
4+ years of experience identifying and exploiting security vulnerabilities across cloud (Azure, AWS, GCP), identity (Entra ID / Active Directory), Windows and Linux endpoints, network, or hardware.
Experience with autonomous or agentic systems using large language models, including tool use, orchestration, evaluation, or safety guardrails applied to offensive security.
2+ years of experience with coding or scripting in languages such as Python, C#, C++, Go, PowerShell, .NET, Rust, or other comparable programming languages, including experience developing or modifying offensive tooling.
Experience working directly with customers or partners and communicating technical security findings to technical and non-technical audiences.
Blue team, detection engineering, or incident response experience and an understanding of how defenders detect and respond to adversary activity.
Familiarity with MITRE ATT&CK, threat-informed defense, and regulated red team frameworks such as TIBER-EU, CBEST, or DORA.
Contributions to the security community through research, open-source tooling, conference presentations, vulnerability disclosures, or similar work.

Penetration Testing IC4 - The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $160,200 - $261,000 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Apply About employer

More about this job

Skills

Teaching
Reporting
Statistics
Computer science
Microsoft Azure
AWS
Google Cloud
Microsoft Active Directory
Microsoft Windows
Linux
Python
C#
C++
Go
Microsoft PowerShell
.NET
Rust
Programming languages
Incident response
MITRE ATT&CK
Research
Presentation skills
Penetration testing

Report this job