Senior Software Engineer - Security

Overview

Viva Engage connects people through communities, bringing leaders and employees together to share knowledge, clarify priorities, and build relationships. Viva Engage (formerly Yammer) is the premier tool to create multi-directional dialogue between tens of millions of employees worldwide every month.

Engage team members are at the forefront of driving AI applications and copilot adoption to make communication and information sharing easy and authentic. Our work supports top challenges for our customers, including digital safety, trusted security standards, and deep analytics to help our customers maximize reach, reduce inefficiencies, and create a thriving organizational culture. We would love to have you join the team driving innovation, connection, and community for our valued global customers. #VivaEngage 

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. 

Responsibilities

• Privacy and Security assessments of platform, data and clients, through code reviews and automation.
• Implementing Privacy, Responsible AI and Security controls and checkpoints to detect and prevent issues early in the software development lifecycle.
• Work with engineering and product teams in the design phase of products and features, conducting threat modeling and performing security architecture and design reviews.
• Implementing defense in depth mechanisms to prevent Security and Privacy vulnerabilities.
  
  

• Bachelor's Degree in Computer Science or related technical field AND 7+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or TypeScript
• OR equivalent experience.
• 7+ years of experience in application Security engineering/Privacy engineering.
• Experience with application security standards such as OWASP ASVS/Top 10, CWE 25.
• Experience with common security libraries, security controls, and common security flaws.
  

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings:

• Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.
  
  

• Experience Security and Privacy threat modeling new features.
• Outstanding collaboration and partnership skills, with proven ability to drive results across teams.
• Understanding of Responsible AI, Privacy and Compliance regulations such as GDPR, CPRA, SOC 2, ISO27k and others.
• Familiarity with web proxies such as Burp, OWASP ZAP or Fiddler.
  
  

#CAPIDC #ENGAGE #VIVA

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.