Overview
This role focuses on advancing state-of-the-art vulnerability research through a combination of deep systems expertise and AI-driven innovation. The position drives the development of scalable approaches for vulnerability discovery, validation, and exploitation, enabling high-impact security outcomes across Microsoft’s products and the broader open-source ecosystem. Operating at the intersection of security and AI, the role emphasizes translating cutting-edge research into practical, end-to-end systems that deliver measurable improvements in security coverage, speed, and reliability.
Responsibilities
Technical Leadership in Vulnerability Research
-
Leads advanced vulnerability research across diverse software systems
-
Designs and develops scalable security analysis methodologies
-
Drives systematic identification, validation, and root-cause understanding of vulnerabilities
-
Shapes research direction and technical strategy for the team
-
Mentors engineers and elevates overall technical rigor
-
Translates research findings into real-world security impact across Microsoft and open-source ecosystems
AI-Driven Bug Finding and Exploit Generation
-
Develops AI-powered systems for automated bug discovery and validation
-
Improves precision, coverage, and reliability of vulnerability detection
-
Drives exploit generation and proof-of-concept (PoC) validation
-
Ensures findings are actionable, reproducible, and security-impacting
-
Builds end-to-end pipelines from detection to confirmed vulnerabilities
-
Advances scalable security analysis at the intersection of AI and systems security
Qualifications
-
Proven expertise in vulnerability research, including identifying, analyzing, and validating complex software vulnerabilities
-
Strong systems background (e.g., OS internals, compilers, networking, or distributed systems)
-
Experience with exploit development and proof-of-concept validation
-
Demonstrated experience building or applying AI/ML techniques to security problems (e.g., bug finding, program analysis, fuzzing)
-
Ability to design and implement scalable security analysis systems or pipelines
-
Strong programming skills (e.g., C/C++, Python, Rust, or similar)
-
Track record of impactful security contributions (e.g., CVEs, research publications, or production systems)
-
Ability to translate research ideas into practical tools or product-ready capabilities
-
Strong collaboration and leadership skills, including mentoring and cross-team influence
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process.
