Online applications are invited for the Software Engineer at Microsoft, Hyderabad. Check the eligibility and other details below!
About Microsoft
Microsoft enables digital transformation in the era of an intelligent cloud and an intelligent edge. Its mission is to empower every person and every organization on the planet to achieve more. Microsoft set up its India operations in 1990. Microsoft in India offers its global cloud services from local data centres to accelerate digital transformation across Indian start-ups, businesses, and government agencies.
Job Description
The Microsoft Edge security team is responsible for securing Edge’s client code running on millions of devices worldwide. MS works with developers to ensure features are designed with security in mind, we identify bugs before hackers do, and we respond to security incidents if they occur. They also work with industry partners to contribute security improvements to the open-source Chromium project to make the web safer for everyone.
Edge security is divided into two sister teams: Vulnerability Research and Security Operations. MSC is hiring for both, and successful applicants will be placed into the team which best fits their skills and interests.
Microsoft is looking for engineers with knowledge and experience in the field of computer security and a passion for learning, underpinned by a deep understanding of computer science. They are looking for individuals with skill sets applicable to either or both teams
Eligibility Criteria
Vulnerability Research: Some of the skills that MSC is looking for are native app security (memory corruption, exploit mitigations, logic issues, etc.), web application security (exploitation techniques such as XSS, mitigations such as CSP, etc.), code auditing, fuzzer development, application of cryptography, and exploit development.
Security Operations: The desired skills in this team are application development in C/C++ and Python, the ability to build and scale services and web applications on Microsoft Azure, fuzzer development (for example using libfuzzer or AFL++), research and tooling for code analysis at scale.
Most of all they are looking for individuals who care deeply about keeping Microsoft customers safe from malicious actors.
Responsibilities
Vulnerability Research primary requirements/responsibilities:
- Conduct security reviews to identify and mitigate risk in Microsoft Edge. Activities include design review, code reviews, fuzzing, and penetration testing.
- Respond to security incidents and reports from external researchers.
- Use a variety of tools and techniques to identify and drive fixes to security vulnerabilities.
- Collaborate with other security teams across Microsoft to design and develop new security mitigations and defences.
- Work closely with our partners in the Chromium community to improve browser security.
Security Operations primary requirements/responsibilities:
- Build and maintain our fuzzing infrastructure across thousands of cores on Azure across three platforms and two architectures.
- Develop new tools and techniques to discover new security bugs at scale.
- Write fuzzers to automatically test Edge’s code base and find new issues.
Qualification
B.S., Computer Science or equivalent work experience or degree.
Experience
- 2+ years of experience in a relevant professional development or security-focused role
- Some of which must be specialising in security.
- Competence in writing at least two of C/C++, JavaScript, and Python
The following additional experiences are favourable, but not requirements:
- Public track record of relevant security research along with relevant CVEs if available, especially around browser vulnerability discovery.
- Development and deployment of fuzz testing software.
- Experience with basic exploit development.
How to Apply?
Interested candidates can directly apply through this link.
Salary
- Monthly in-hand salary: ₹2,16,926 – ₹2,25,598
- Note: Salary information is taken from here!
Location
Hyderabad, Telangana, India.
