Security Researcher II

Microsoft; Cheltenham; On-site; GBP 50,000 - 80,000; Full time

Job summary

Join the Microsoft Security Response Center (MSRC) as a security researcher, where your focus will be on enhancing the security of Microsoft's products and infrastructure. You will analyze vulnerabilities, conduct penetration testing, and develop innovative security solutions. This role offers the opportunity to work at the forefront of cybersecurity, with potential for significant impact on Microsoft's security strategies.

Qualifications

• Experience with cyber security, anomaly detection or equivalent experience required.
• Strong grasp of security vulnerabilities and prevention methods.
• Public record of vulnerability research preferred.

Responsibilities

• Analyze critical security vulnerabilities and provide remediation guidance.
• Conduct penetration testing on Microsoft products and infrastructure.
• Develop tools to identify and exploit security issues.

Skills

Security vulnerabilities

Software development lifecycle

Cyber security

C/C++ code understanding

Automation development

Education

Bachelor's Degree in Cyber Security or related field

Tools

Security test tools

Job description

Responsibilities (Text Only)

As a member of the MSRC team, you will play a vital role in enhancing the security of Microsoft infrastructure, products and services. You will have the responsibility to: - Analyze critical security vulnerabilities reported by security researchers from around the world and provide guidance on remediation. - Develop tools and techniques to discover and exploit vulnerabilities in Microsoft products and services. - Conduct penetration testing on Microsoft hardware, devices, products, services, virtualization stacks and cloud infrastructure to identify and report security issues. - Innovate in security mitigations and hardening to make Microsoft products and services more resilient to attacks. - Gain insights from incoming bug trends to inform security research for the team, as well as influence the broader Microsoft security strategy.

Qualifications (Text Only)

We are looking for a security researcher who is passionate about security research in hardware, firmware and virtualization platforms. You should have the following qualifications: - Experience in software development lifecycle, large scale computing, modeling, cyber security, anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field OR equivalent experience. - Strong grasp security vulnerabilities, how they can be exploited, and how they can be prevented. - Proficiency in developing tools and automation to identify or verify security issues. - Ability to communicate and advise on security design and implementation for complex security challenges. - Familiarity with publicly available security test tools and techniques. - An ability to read and understand C and/or C++ code. Assembly is a plus. Preferred Qualifications: - A public record of vulnerability research and discovery - An understanding of low level security issues that may arise in hardware or kernel components and their implications - An understanding of how hypervisors and paravisors work. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a requestvia the Accommodation request form. #MSRC #Security #DSR#MSFTSecurity #VulnerabilityResponse #VulnerabilityResearch Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.