Cyber Senior Security Engineer
7 days ago
Are you driven by a hacker mindset and ardent about enhancing the security of hardware, firmware, and low-level components? If so, this job opportunity is tailored for you
The Azure Hardware and Firmware DevSec team is currently in search of a Senior Security Engineer with expertise in hardware, firmware, and related low-level components.
As a member of the HW/FW Security team within the Azure Security organization, you will have an opportunity to shape the landscape of platform security. This involves conducting security reviews such as threat modeling, design and code assessments for both Microsoft and third-party HW/FW solutions, penetration testing, vulnerability analysis, devising solutions to address identified vulnerabilities, and providing guidance to teams on securely building hardware, firmware, and related components.
We are seeking a detail-oriented, self-motivated engineer with exceptional communication skills who revels in delving into the security intricacies of various low-level components, including motherboard peripherals, network communication, disk controllers, and hypervisors. In this role, you will collaborate closely with other Security Engineers.
Responsibilities- Threat Modeling / Security Assessments: Utilizing research and expertise to conduct threat modeling and security assessments of Azure HW/FW solutions and cloud infrastructure. Your objective is to prioritize areas of security risk, identifying and addressing security defects that may impact Azure's capacity to safeguard against, detect, investigate, and recover from security incidents.
- Security Reviews: Prioritize the highest risk features within Azure and perform comprehensive reviews of their design, source code, or final product to identify security defects. Utilize existing tools or develop new ones, such as static/dynamic analysis tools, to enhance efficiency and quality of work. Take the lead in addressing identified security flaws and implementing proactive security hardening measures to mitigate future exploitable vulnerabilities.
- Driving Security: Collaborate with cloud server and in-rack devices hardware ecosystem partners to establish security solutions and requirements, identify critical threats, and develop agreed plans for remedial actions. Collaborate with Microsoft Hardware Engineering teams from the early stages of product development to guarantee the security of Azure hardware platforms.
- Contributing to Policies: Engage with cross-company teams and industry partners to ensure that our insights are effectively integrated into development policies, standards, and practices. Aim to continuously elevate the security standards by fostering a growth mindset and implementing best practices.
- Emerging Threat Research: Stay at the forefront of emerging threats impacting cloud services by conducting research on externally identified vulnerabilities and proactively investigating security risks associated with the technologies utilized by Azure and our customers.
- Communication & Presentation: Be competent in security and be available to answer questions and give guidance on addressing security defects. Present team findings through white papers and security assessment reports. Work with other teams to define and adopt new best practices for secure development and operations.
- 5+ years experience in software development lifecycle, large scale computing, modeling, cyber security, anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field OR equivalent experience.
- 6+ years experience in software development lifecycle, large scale computing, modeling, cyber security, anomaly detection OR Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field OR equivalent experience.
- Certified Information Systems Security Professional (CISSP) Certification, Security+ Certification, or relevant certification.
- This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.
- 6+ years experience in software/firmware/hardware development lifecycle, large scale computing, modeling, cyber security OR Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field OR equivalent experience.
- Profound understanding of server platform buses and peripherals, complemented by hands-on experience in conducting security analyses of peripherals.
- Proficiency in hardware description languages (HDL) and RTL, coupled with hands-on experience in conducting security reviews of hardware design.
- Deep and broad understanding of security vulnerabilities and attacks (Hardware, Software, Network, and People) and ability to apply them or find new ones based on new technology being developed.
- Experienced coding skills in one or more popular languages and platforms, including C/C++, C#, assembly, Rust, Python, and others, and the ability to pick up new platforms quickly.
- Detailed understanding of encryption, low-level networking protocols, operating systems including Linux and Windows.
Security Assurance IC4 - The typical base pay range for this role across Canada is CAD $108,100 - CAD $199,700 per year.
Microsoft will accept applications for the role until November 25, 2024.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the Accommodation request form.
Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.
#J-18808-Ljbffr-
Cyber Security Engineer
2 months ago
Vancouver, Canada D3 Security Full timeD3 Security provides the world's leading platform for security orchestration, automation, incident response, and investigation/case management. Today, more than 1000 organizations - including over 100 of the Fortune 500 rely on D3 to build, automate and execute incident response plans, connect with third-party technologies and apply data-driven decisions...
-
Cyber Security AI Engineer
1 week ago
Vancouver, British Columbia, Canada D3 Security Full timeAbout D3 SecurityD3 Security is at the forefront of innovation, harnessing the power of AI to transform cyber security operations and empower the next generation of security professionals. We are a dynamic, fast-growing company with a collaborative environment where creativity and technical expertise thrive.As a leader in the field, we aim to push the...
-
Security Engineer II @ Microsoft
2 months ago
Vancouver, Canada Cyber Crime Full timeThe Microsoft Offensive Research & Security Engineering (MORSE) team is looking for a learn-it-all Security Engineer II, that will help secure Microsoft products and devices.The Cloud team is responsible for securing the next-gen Cloud compute platforms and virtualization technologies, used by more than a billion customers every day in businesses and across...
-
Senior Cyber Security Strategist
1 week ago
Vancouver, British Columbia, Canada LZ Security & Service GmbH Full timeJob Description:LZ Security & Service GmbH is seeking a highly skilled Senior Cyber Security Strategist to lead the enhancement of its Security strategy through the development of a multi-year roadmap. Key responsibilities include:Development of a multi-year cyber security roadmap and executing on a revamped security strategy.Working with vendors and...
-
Cyber Security Engineer
2 weeks ago
Vancouver, Canada Yeah! Global Full timeNote: This job does not offer any Visa sponsorship. We are looking for applicants already living in Canada. Overview: Our client is seeking a highly skilled and motivated Cyber Security Engineer to their dynamic team. As a Cyber Security Engineer, you will be responsible for protecting our organization's computer systems, networks, and data from cyber...
-
Cyber Security Consultant
6 months ago
Vancouver, Canada Lightship Security Full timeHighlights of the Job Lightship Security is a market leader in standards-based IT product security certification. We work with leading edge technology vendors from around the world to evaluate and test their products against various cyber security standards such as Common Criteria and FIPS 140. We are committed to creating real world value through continued...
-
Ingénieur Sécurité IT
2 months ago
Vancouver, Canada Cyber Crime Full timeThe Microsoft Offensive Research & Security Engineering (MORSE) team is looking for a learn-it-all Security Engineer II, that will help secure Microsoft products and devices.The Cloud team is responsible for securing the next-gen Cloud compute platforms and virtualization technologies, used by more than a billion customers every day in businesses and across...
-
AWS IT Security Engineer
2 months ago
Vancouver, Canada D3 Security Full timep>D3 Security provides the world's leading platform for security orchestration, automation, incident response, and investigation/case management. Today, more than 1000 organizations - including over 100 of the Fortune 500 rely on D3 to build, automate and execute incident response plans, connect with third-party technologies and apply data-driven decisions...
-
Cyber Security Strategy Leader
4 weeks ago
Vancouver, British Columbia, Canada LZ Security & Service GmbH Full timeLZ Security & Service GmbH is seeking a highly skilled Cyber Security Strategy Leader to enhance its security strategy.Key Responsibilities:Develop a multi-year cyber security roadmap and execute on a revamped security strategy.Work with vendors and execute RFPs.Manage, grow, and mentor the current Security strategy and delivery team.Location and Employment...
-
AWS IT Security Engineer
2 weeks ago
Vancouver, Canada D3 Security Full timep>D3 Security provides the worlds leading platform for security orchestration, automation, incident response, and investigation / case management. Today, more than a 1000 organizations- including over 100 of the Fortune 500's rely on D3 to build, automate and execute incident response plans, connect with third-party technologies and apply data driven...
-
Cyber Security Expert
4 weeks ago
Vancouver, British Columbia, Canada Royal Bank of Canada> Full timeJob SummaryOverviewRoyal Bank of Canada is seeking a skilled Cyber Security Expert to join its team of cybersecurity professionals. The ideal candidate will have a strong background in cybersecurity and experience in threat hunting, security research, and innovation.Key Responsibilities Lead multiple projects and strategize for the improvement and...
-
Chief Cyber Security Architect
1 week ago
Vancouver, British Columbia, Canada LZ Security & Service GmbH Full timeLZ Security & Service GmbH is seeking a highly experienced Chief Cyber Security Architect to lead the enhancement of our Security strategy through the development of a multi-year roadmap.As a key member of our team, you will be responsible for:Developing and executing a comprehensive cyber security roadmap to drive business growth and minimize...
-
Cyber Senior Security Engineer
4 weeks ago
Vancouver, Canada Django Rest Framework Full timecom is hiring a Remote Senior Security EngineerAbout Super.com to help maximize lives–both the lives of our customers and the lives of our employees– so that everyone can experience all that life has to offer. p>We are more than a fast-paced, high-growth tech company; p>About This RoleWe are looking for a Senior Security Engineer to take significant...
-
Senior Cyber Security Expert
3 weeks ago
Vancouver, British Columbia, Canada Royal Bank of Canada Full timeAbout the PositionThe Royal Bank of Canada is seeking a Senior Cyber Security Analyst to join its Identity Access Management (IAM) Team. As a key member of the team, you will work with business stakeholders to integrate RBC applications onto IAM solutions.Key responsibilities include:Collaborating with business partners and application teams to explain the...
-
Senior Cyber Security Transition Lead
1 week ago
Vancouver, British Columbia, Canada S.i. Systèmes Full timeAbout S.i. System's Public Sector Client">We are looking for a Senior Cutover/Release Manager to provide technical leadership for a Cyber Security Program.">This is a 6-month contract with the possibility of renewal. The successful candidate will work 37.5 hours per week in a hybrid environment, spending one day per week at our office in New...
-
Cyber Security Defense Analyst
4 weeks ago
Vancouver, British Columbia, Canada Royal Bank of Canada Full timeJob SummaryThe Royal Bank of Canada is seeking an experienced Cyber Security Defense Analyst to contribute toward the success of our Cyber Resiliency initiatives. Under the direction of the Director of Correlation Engineering, the Senior Cyber Security Defense Analyst is responsible for maintaining the RBC Security Information Event Management (SIEM)...
-
Senior Security Detection Engineer Lead
3 weeks ago
Vancouver, British Columbia, Canada Royal Bank of Canada Full timeJob SummaryWe are seeking a highly skilled Senior Security Detection Engineer Lead to join our team at Royal Bank of Canada. This is a key technical role that will drive development using automation to new or existing use cases to reduce the overall mean time to detect and respond to incidents.About the RoleThis is an exceptional opportunity to collaborate...
-
Senior Security Detection Engineer
2 weeks ago
Vancouver, Canada RBC Full timeJob Summary Job Description What is the Opportunity? The role of the Senior Security Detection Engineer is to provide specialized subject matter expertise for the Detection Engineering & Onboarding (DEO) team, for RBC's Global Cyber Security. This is a key technical role supporting mission critical enterprise network security operations and IT services...
-
Lead Cyber Security Architect
4 weeks ago
Vancouver, British Columbia, Canada Royal Bank of Canada Full timeRoyal Bank of Canada: Cyber Security ArchitectWe are seeking an experienced Cyber Security Architect to join our team at Royal Bank of Canada. As a key member of our IT organization, you will be responsible for designing and implementing robust security solutions to protect our clients' sensitive information.Company Overview:At Royal Bank of Canada, we are...
-
Cyber Security Practice Leader
4 weeks ago
Vancouver, British Columbia, Canada Wipro Technologies Full timeCyber Security Practice LeaderWe are looking for a seasoned business leader to drive our Cyber Security Advisory Group, focusing on go-to-market and team development around Cyber Security related business and build activities for our clients. Experience with Big 4 is a plus.Lead Cyber Security practice's go-to-market and presales efforts, collaborating with...
