Microsoft Cloud Infrastructure and Operations is the team behind the cloud. MCIO is responsible for delivering over 200 Microsoft web portals, Live and Online Services around the world including infrastructure, security and compliance, operations, globalization, and manageability. Our focus is on smart growth, high efficiency, and delivering a trusted experience to customers and partners worldwide. We are looking for a passionate, high energy individual to help build the network that powers the world's largest online services. The GDCOE organization focuses on ensuring a secure GDCOE platform for developers and a secure experience for GDCOE users worldwide. As part of GDCOE, you will perform security reviews, penetration testing, vulnerability analysis, develop solutions to remediate selected vulnerabilities, and provide consultation to teams to help them develop software and related components securely. We are looking for a detail-oriented, self-motivated, and highly communicative engineer
Key responsibilities: Penetration testing: you will examine chosen target systems in detail, looking for vulnerabilities and weaknesses in the code and the designs, demonstrate the value of an "assume breach" mentality. Security Assessments - Parlaying research and knowledge into threat models and security assessments of GDCOE services, platforms and infrastructure. You have a goal to prioritize areas of security risk while identifying and addressing risks that affect GDCOE's ability to protect, detect, investigate, and recover from security vulnerabilities and targeted attacks. Security Code Reviews
Knowledge, experience and skills: BS degree in Computer Science or Computer Engineering 5+ years of strong coding skills in one or more popular languages and platforms, including C/C++, C#, Java, Javascript, SQL, Ruby, Python 3+ years building secure systems (payments, billing, finance, government data, etc.) Excellent analytical skills and an ability to abstract concepts and think in terms of OO design Strong problem solving and communication skills Data-driven mind-set. Ability to mine data and persuade your team using effective analysis Deep and broad understanding of security vulnerabilities