Microsoft Azure is at the center of Microsoft's cloud services strategy and the future of Microsoft. Azure brings together virtualization, compute, storage, authentication, authorization, media and more to enable anyone to bring their business in the cloud. The Azure Security Engineering organization focuses on ensuring a secure Azure platform for developers and a secure experience for millions of users worldwide. The Azure Security Assurance team is seeking a Security Engineer with demonstrated experience in hardware, firmware, drivers, and other low-level components. As part of the Security Assurance team, you will perform security reviews, penetration testing, vulnerability analysis, develop solutions to remediate selected vulnerabilities, and provide consultation to teams to help them develop hardware, firmware, and related components securely. We are looking for a detail-oriented, self-motivated, and highly communicative engineer who can geek out on the security details of a BMC, JTAG
Penetration testing: you will examine chosen target systems in detail, looking for vulnerabilities and weaknesses, and, in collaboration with other penetration testing and red teams around the company, demonstrate the value of an "assume breach" mentality. Emerging Threat and Vulnerability Research – You will be expected to be stay on top of emerging threats which affect cloud services through collaboration and original research, including proactive security research on the technologies that Azure and our customers utilize and depend on. A very high level of creativity and thirst for knowledge
Required Qualifications: Bachelors of Science, Bachelors, BA, BA CS, Computer Science, Mathematics, Engineering degree or equivalent experience 7 years of experience in hardware security and/or software engineering Preferred Qualifications: Strong coding skills in one or more popular languages and platforms, including C/C++, C#, Java, Javascript/Typescript, SQL, assembly, Ruby, Python, and others, and the ability to pick up new platforms quickly Deep knowledge of hardware and low-level security issues, general security and a strong engineering and development skillset. Detailed knowledge of hardware