Software Engineering - AI Safety and Security

Overview

Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end to end, simplified solutions. The Microsoft Security organization accelerates Microsoft's mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers' heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world.

We are seeking an experienced Software Engineer - AI Safety and Security to join a high impact team sitting at the intersection of cybersecurity and generative AI. As an engineer on the AI Safety and Security Platform team, you will develop and execute the technical strategy for internal platform capabilities, partnering closely with cross-functional teams across the company, to secure Microsoft's flagship AI and agentic products. You will build infrastructure to enable sophisticated threat detection and forensic investigation, produce threat intelligence and insights, and accelerate response to safety and security incidents.

More about our team:

We are the Artificial Generative Intelligence Security (AeGIS) team, and we are charged with ensuring justified confidence in the safety and security of Microsoft's generative AI products. This encompasses providing infrastructure for AI safety and security; serving as a coordination point for all things AI incident response; researching the quickly evolving threat landscape; red teaming AI systems for failures; and empowering Microsoft with this knowledge. We partner closely with product engineering teams to mitigate and address the full range of threats that face AI services - from traditional security risks to novel security threats like indirect prompt injection and entirely AI-native threats like the manufacture of sexual exploitation and abuse material (SEAM) or deep fake production or the use of AI to run automated scams. We are a mission-driven team intent on delivering trustworthy AI and response processes when it does not live up to those standards. We are always learning. Insatiably curious. We lean into uncertainty, take risks, and learn quickly from our mistakes. We build on each other's ideas, because we are better together. We are motivated every day to empower others to do and achieve more through our technology and innovation. Together we make a difference for all of our customers, from end users to Fortune 50 enterprises. Our team has people from a wide variety of backgrounds, previous work histories, and life experiences, and we

Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities

• AI Logging and Observability: Develop company-wide logging strategies and implementations, enabling reliable attack mapping and automated detections; understand the architecture and pipelines for existing logging, data storage, and observability systems; and determine what additional infrastructure should be built.
• Detection Engineering: Partner with AI Incident Response and Threat Hunting teams to create novel detection capabilities; build infrastructure that enables meta-cognition, mechanistic interpretability, and anomaly detection, to identify patterns of attack signatures at scale.
• Threat Intelligence: Deliver data integrations across multiple data sources and platforms; serve diverse stakeholder needs for threat intelligence; partner with data science to operationalize pipelines that aggregate and correlate multi-source signals; deliver actionable insights, trend analyses, and automated reporting integrated with detection and response workflows.
• Mitigations: Partner with AI Red Team, applied science, and security research to implement mitigation strategies against emerging attack techniques; partner with product teams to demonstrate safe system architecture design.

Qualifications

Required Qualifications

• Bachelor's Degree in Computer Science or related technical field AND 2+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience.

Preferred Qualifications

• Demonstrated technical depth with LLM-based systems-prompts, system instructions, agents/tools, RAG, embeddings-and experience building or securing AI copilots or agent-based products.
• Demonstrated record of successfully operating in highly ambiguous environments and integrating solutions into varied environments.
• Experience with cybersecurity workflows (alerting, triage, investigation, threat hunting, incident response) and familiarity with frameworks like MITRE ATT&CK, NIST, or OWASP for LLM applications.
• Exceptional written and verbal skills; adept at articulating business needs and driving alignment across engineering, research, and security teams.
• Designing, building, and operating scalable, highly available cloud services or distributed systems on platforms such as Azure, AWS, Google Cloud Platform, or comparable cloud environments, with production ownership and CI/CD pipeline integration.
• Applying distributed systems concepts such as concurrency, conflict resolution, and consensus algorithms to build resilient and maintainable back-end architectures.
• Building systems with emphasis on reliability, durability, and operational efficiency, including experience with live site operations, incident response, and performance optimization.

#MSFT Security #MSECAI #AI #RAI #Safety #Security #MSECAI #AEGIS #AIIR #AISP

Software Engineering IC3 - The typical base pay range for this role across the U.S. is USD $100,600 - $199,000 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $131,400 - $215,400 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
;br>
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.