Security Researcher

Overview

Do you enjoy the challenge of discovering and analysing vulnerabilities in software and services to understand how they work and how to fix them? Are you excited by the idea of analysing real-world exploits and researching new attack techniques? Are you passionate about developing new tools and techniques to scale vulnerability research to meet real-world demands?

Do you want to be part of an inclusive & collaborative team that invests in the growth and success of one another? The Microsoft Security Response Centre (MSRC) is responsible for detecting, protecting, and responding to threats that affect Microsoft’s products and services. We are looking for a motivated Security Researcher to join our team.

As part of the MSRC, our team (Vulnerability & Mitigations Team) is responsible for analyzing vulnerabilities found in Microsoft’s products and services to determine their root cause, severity, and security impact. This analysis plays a critical role in shaping the security updates that are deployed to customers. Our research projects cover a range of topics including vulnerability discovery & automation, exploit and vulnerability mitigations, exploit development, operating systems security (Windows and Linux), virtualization security, and hardware vulnerabilities and mitigations.

This is a unique opportunity to have a positive impact on improving safety for customers around the world and to work on challenging real-world security problems as part of a supportive and collaborative team.

Responsibilities

As a member of the MSRC team, you will play a vital role in enhancing the security of Microsoft products and services. You will have the opportunity to:

• Analyse critical security vulnerabilities reported by security researchers from around the world and provide guidance on remediation.
• Detect, reverse engineer and patch live exploits reported to MSRC.
• Use state of the art AI tooling to find and analyze vulnerabilities at scale.
• Develop new tools and techniques to improve vulnerability analysis workflows.
• Innovate in security mitigations to make Microsoft products and services more resilient to attacks.
• Gain insights from incoming bug trends to inform security research for the team, as well as influence the broader Microsoft security strategy.
• Work with and learn from experts across Microsoft and grow your career in security in a motivated and supportive team.

Required qualifications

We are looking for a security researcher who is passionate about security research in Windows platforms. You should have some of the following qualifications:

• You must be legally authorised to work in the UK to be eligible for this role
• Experience in software development lifecycle, large-scale computing, modeling, cyber security, and/or anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science or related field OR equivalent experience
• An ability to read, understand and debug C and/or C++ code
• Proficiency in developing tools and automation to identify or verify security issues, and scaling analysis workflows using AI and traditional
• Knowledge of software security vulnerabilities, how they can be exploited, and how they can be prevented
• Experience in security research on Windows/Linux systems

#EiP

Pay and benefits

Security Research IC2 - The typical base pay range for this role across United Kingdom is £ 44,200.00 - £ 75,700.00 per year. Certain roles may be eligible for benefits and other compensation.

Find additional benefits and pay information here

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.