We are a team in M365 Core called Substrate; we have the massive responsibility and charter to help ensure the security and trustworthiness of M365 product suite. We want to reshape and modernize security to empower every user, customer, and developer with a secure cloud that protects them with end-to-end via our solutions. The M365 Substrate organization accelerates Microsoft’s mission via bold ambitions to ensure that our company and industry are securing digital technology platforms, devices, and clouds across our estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world.

The Security Engineering team within M365 Core helps to identify threats and gaps in the infrastructure that hosts the planet’s largest, most influential organizations. We are looking for individuals who are forging the pentest discipline in new and modern ways in the era of AI. The role will encompass a blend of research and testing which we will guide our collective engineering organizations to secure their products in the most uniform and durable solutions possible.

This role as a Penetration Testing Specialist will provide you the opportunity to work on global scale services  unique experiences which are hard to replicate or find outside of a major SaaS provider. You will research and perform offensive security operations against M365 backed infrastructure. As a Penetration Testing Specialist you will perform research with your team to identify and validate vulnerabilities from external research as well as proactive engagements. We want to move from reactive to proactive, translating findings to actionable code fixes within the product groups. You’ll have access to the latest AI systems and the freedom to explore creative attack scenarios while contributing to the security of millions worldwide. Along with running offensive security operations, you will develop tooling and new code leveraging AI to look for vulnerabilities in a scalable manner.  

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.

• Bachelor’s Degree in Statistics, Mathematics, Computer Science or related field OR 3+ years experience in software development lifecycle, large-scale computing, modeling, cybersecurity, and/or anomaly detection.
• 3+ years of experience in security research, penetration testing, or offensive security roles.
• Hands-on experience discovering and exploiting vulnerabilities in AI systems and platforms.
• Proficiency in Python with experience in AI frameworks and security testing tools.
• Ability to read and analyze code across multiple languages and codebases.

We are looking for a Software Engineer to join our Organic Growth team and help grow the user base of the Office Product Group’s flagship applications like Word, Excel, PowerPoint and Clipchamp. In addition to working on a Next.js application that builds our pages and building custom integrations with the Contentful Content Management Systems (CMS) to support our content development team, you’ll have an opportunity to gain DevOps experience and support a platform that serves the Office Product Group (OPG).

You’ll join a nimble, cross-disciplinary team embedded within Microsoft, working with software engineers, content creators and designers to deliver innovative solutions. If you’re passionate about delivering world-class products in creative, real-world scenarios and want to work at the intersection of cutting-edge technology and storytelling, we want to hear from you. 

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others and collaborate to realize our shared goals. Each day we build on our values of respect, integrity and accountability to create a culture of inclusion where everyone can thrive at work and beyond. 

• Works with appropriate stakeholders to understand customer, business, and technical requirements for a defined set of features. 
• Identifies dependencies and contributes to design documents with limited oversight.
• Breaks down larger work items into smaller deliverables and provides reliable estimates.
• Builds and implements features for Next.js and Contentful CMS applications and supporting Azure functions.
• Uses DevOps practices to maintain and improve the full-stack application, including infrastructure, security, and deployments.
• Takes part in an on-call roster to monitor and mitigate system/service for degradation and downtime. 
• Remains current in skills by investing time and effort into staying abreast of current developments in software development, including Next.js, Typescript, Infrastructure as Code (IaC) and the latest AI tools.

We emphasise a culture of continuous learning, so a growth mindset and passion for learning are essential. You should expect your teammates to be invested in helping you succeed and be prepared to offer the same support in return. We recognise and celebrate the unique strengths and perspectives of every person on the team and leverage our diversity to create more inclusive products for our customers.

Required/Minimum Qualifications:  

• Bachelor’s Degree in Computer Science or related technical field AND 2+ years technical engineering experience with coding in languages including but not limited to C#, Java, JavaScript, TypeScript or Python. 
  • OR equivalent experience. 
• 2+ years demonstrated experience in frontend or full stack development. 
• Passion for learning new skills with the ability to thrive in a feedback-driven environment. 
• Someone who drives collaboration in your own team and across squads – you’re able to consider others’ ideas, implement new methods, surface and resolve disagreements and empathize with users without breaking a sweat. 
• Experience with Github Copilot (or similar tools) and ability to leverage these for productivity gains.

Preferred/Additional Qualifications:  

• Proficiency in JavaScript or TypeScript and experience with web app development using frameworks like React or Vue. 
• Ability and interest to learn new languages and APIs. 
• Experience with or interest in infrastructure and security.  
• Building scalable services in Node, C# or Python. 
• Focus on appropriate comprehensive automated testing and documentation. 
• Optimising performance and tracking down and fixing customer-facing issues. 
• Online video and contributing to the technically challenging problems we’re solving.