Principal Software Engineer

Microsoft runs on trust.  Earning and keeping that trust has never been more important.    

In Customer Security and Trust (CST), program managers, engineers, analysts, investigators, data scientists, attorneys, and business professionals are responsible for some of the most exciting projects at Microsoft focused on protecting our customers.  

The Cybersecurity & Trust Engineering team (CSTE) in CST is the central driving force of Engineering and Cybersecurity initiatives for CST and for Microsoft Corporate, External and Legal Affairs (CELA) as a whole. The Security and Privacy Engineering (SPE) team is responsible for embedding security and privacy considerations into all facets of the organization’s operations. SPE team is instrumental in identifying critical risks, providing engineering and cybersecurity expertise to implement effective mitigations, and working closely with diverse stakeholders across the company and external organizations to safeguard information assets and ensure compliance with all relevant regulations and standards. 

We are hiring a Principal Software Engineer to join our team. This role will be part of the SPE team, contributing to security initiatives within the organization and across CELA Division with the opportunity of bigger impact. You will contribute to strategic projects and assignments to help increase the security posture of cloud infrastructure and services, assessing security and privacy risks and contribute to improvements and remediation of issues. 

This is a unique opportunity within Microsoft to work in a dynamic and collaborative team with impact across many services harvesting the power of the cloud, apply your Security and technical skills to empower analysts and investigators to keep our digital world safe for consumers and businesses across the globe. 

A successful candidate will be passionate about secure development practices and architecture, reliability, cloud computing and automation necessary to strengthen the resiliency and security posture of our services and infrastructure.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. 

#CELA

Responsibilities

• Establish collaboration with Engineering teams in CSTE and across CELA on new features, services, and updates to the product   
• Participate in threat model reviews and help identify security flaws early in the design phases  
• Foster onboarding and adoption of Security Development Lifecycle (SDL)  
• Help design implementation of Defense in Depth and Zero Trust strategies while ensuring secure by design, security by default, and secure by deployment principles  
• Lead security architecture reviews   
• Provide guidance and recommendations for secure development   
• Fix security issues in code or infrastructure  
• Participate in code reviews to evaluate security risks and improvements  
• Lead cloud incident response activities as they occur  
• Promote security awareness and provide training and good coding practices  
• Supports operational security and security incidents as well as security reviews 
• Help define, document, evolve, and evangelize secure engineering standards and best practices across multiple areas including automation  
• Contribute to, and establish a strategic view of risk to our services and iterative and consistent security improvements   

• Other

  • Embody our

    Apply for this role

    Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.

    Apply Now →Generate Application Kit

    Free account required — sign up in 30s

    Report an issue

    Company

    Microsoft

    View company profile →