Cheltenham, United Kingdom Role overview
About this role
Do you enjoy the challenge of discovering and analysing vulnerabilities in software and services to understand how they work and how to fix them? Are you excited by the idea of analysing real-world exploits and researching new attack techniques? Are you passionate about developing new tools and techniques to scale vulnerability research to meet real-world demands? Do you want to be part of an inclusive & collaborative team that invests in the growth and success of one another? The Microsoft Security Response Centre (MSRC) is responsible for detecting, protecting, and responding to threats that affect Microsoft’s products and services. We are looking for a motivated Security Researcher to join our team.
As part of the MSRC, our team (Vulnerability & Mitigations Team) is responsible for analyzing vulnerabilities found in Microsoft’s products and services to determine their root cause, severity, and security impact. This analysis plays a critical role in shaping the security updates that are deployed to customers. Our research projects cover a range of topics including vulnerability discovery & automation, exploit and vulnerability mitigations, exploit development, operating systems security (Windows and Linux), virtualization security, and hardware vulnerabilities and mitigations.
This is a unique opportunity to have a positive impact on improving safety for customers around the world and to work on challenging real-world security problems as part of a supportive and collaborative team.
Responsibilities
As a member of the MSRC team, you will play a vital role in enhancing the security of Microsoft products and services. You will have the opportunity to:
• Analyse critical security vulnerabilities reported by security researchers from around the world and provide guidance on remediation.
• Detect, reverse engineer and patch live exploits reported to MSRC.
• Use state of the art AI tooling to find and analyze vulnerabilities at scale.
• Develop new tools and techniques to improve vulnerability analysis workflows.
• Innovate in security mitigations to make Microsoft products and services more resilient to attacks.
• Gain insights from incoming bug trends to inform security research for the team, as well as influence the broader Microsoft security strategy.
• Work with and learn from experts across Microsoft and grow your career in security in a motivated and supportive team.
Qualifications
We are looking for a security researcher who is passionate about security research in Windows platforms. You should have some of the following qualifications:
- 1+ year(s) experience in software development lifecycle, large-scale computing, modeling, cyber security, and/or anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science or related field OR equivalent experience
- An ability to read, understand and debug C and/or C++ code
- Proficiency in developing tools and automation to identify or verify security issues, and scaling analysis workflows using AI and traditional
- Knowledge of software security vulnerabilities, how they can be exploited, and how they can be prevented
- Experience in security research on Windows/Linux systems
Security Research IC2 - The typical base pay range for this role across United Kingdom is £ 44,200.00 - £ 75,700.00 per year. Certain roles may be eligible for benefits and other compensation.
Find additional benefits and pay information here:
https://careers.microsoft.com/v2/global/en/corporate-pay/united-kingdom-corporate-pay.html
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.