Overview
Are you interested in working on cutting-edge cloud security products?
Would you like to be part of one of the world’s most advanced cyber-security solutions and protect millions of computers from thousands of active attack attempts, every month?
Look no further than the Microsoft Defender engineering team.
Defender is looking for a Software Engineer II to join our team.
You will be building and delivering cloud solutions to meet the scale that few companies in the industry are required to support.
Leveraging state-of-the-art technologies, you will be instrumental in delivering holistic protection within government environments.
The Microsoft Defender team is responsible for delivering a constantly evolving set of services and solutions to meet the challenging landscape of our ever-evolving attackers.
Microsoft’s mission is to empower every person and every organization on the planet to achieve more.
As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals.
Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond Responsibilities
AI-Native Development
Uses appropriate artificial intelligence (AI) tools and practices across the software development lifecycle (SDLC) in a disciplined manner.
Takes responsibility for the content of their AI-generated changes to artifacts, reviewing all changes and applying appropriate tooling and processes with minimal guidance.
Coding
Supports efforts to use debugging, tests, tools, logs, telemetry, and other methods to proactively verify assumptions before issues occur for product features in production.
Conducts incident retrospectives to identify root causes of problems, implements repair actions, and identifies mechanisms to prevent incident recurrence with minimal supervision.
Under minimal guidance, applies least-access principles, and uses logging, telemetry, and other appropriate mechanisms to investigate issues while retaining privacy and security.
Reviews product feature code and test code to ensure it meets team standards, contains the correct test coverage, and is appropriate for the product feature.
Contributes to bringing insight to code reviews to help improve code quality, coaching and providing feedback to develop other engineers' skills with minimal guidance.
Contributes to code reviews in a timely fashion that helps accelerate the pace of development on the team.
Considers diagnosability, reliability, testability, and maintainability when reviewing code and understands when code is ready to be shared or delivered.
Applies and reviews for coding patterns, security risks, compliance issues, and best practices in code reviews.
Uses automated source code analysis tools that are incorporated into the build/development process with minimal supervision.
Creates and implements code for a product, service, or feature, reusing code as applicable with minimal supervision.
Writes and learns to create code that is extensible and maintainable.
Considers diagnosability, reliability, and maintainability with few defects, and understands when the code is ready to be shared and delivered.
Applies coding patterns and best practices to write code (e.g., leveraging state-of-the-art generative artificial intelligence [GenAI], approaches to source code organization, naming conventions).
Escalates identified blockers or unknowns during the development process, communicates how they will impact timelines, and contributes to identifying strategies and/or opportunities to address them with minimal supervision.
Design
Understands and provides feedback for proposals for architecture, with technical leadership from others.
With minimal supervision, tests and explores various design options for a product/solution feature, outlining strengths and weaknesses of each option.
Collaborates with architects with minimal supervision to build and modify a product/solution feature, providing feedback as needed.
Begins to own or collaborate with other engineers on the architecture of solutions, following technical leadership as applicable.
Contributes to the development of design documents that support user stories and other product requirements with oversight.
Develops an awareness of the current technology landscape.
Escalates and shares findings from investigations with the team and owns some design decisions.
Helps to ensure system architecture and individual designs meet performance, scalability, resiliency, cost of goods sold (COGS), and other requirements and expectations.
Upholds Microsoft standards of security, privacy, and other compliance requirements and expectations.
Understands the importance of building solutions that expand upon the work of others.
Contributes to the refinement of product features by escalating findings from analyses to inform decisions regarding the engineering of products.
Creates a clear test strategy that ensures solution quality, prevents regression from being introduced into existing code with minimal supervision.
Executes test plans that incorporate security testing to validate security invariants (including negative cases) with minimal supervision.
Adds new tests to cover gaps, deleting or fixing broken tests, improving the speed, reliability, and defect localization of tests in the feature area.
Builds testable code and considers testability during design for a set of features with minimal guidance.
Understands the different types of tests that can be done on a particular system (e.g., unit tests), and maintains up-to-date understanding of testing architectures used both across Microsoft and across the industry.
Leverages artificial intelligence (AI) tools for test automation with minimal supervision.
Contributes to identifying dependencies, and incorporates them into the development of design documents for a product area with little oversight.
Helps to actively identify other teams and technologies to leverage, how they interact, and where their own system or team can support others.
Understands downstream interactions between systems.
Contributes to collaborating with other teams to reach common goals where dependencies and validation concerns overlap.
Engineering Excellence
Contributes to the identification of requirements for, and development of automation within production and deployment of a complex product feature, targeting zero-touch deployment when possible.
Runs code in simulated, or other non-production environments to confirm functionality and error-free runtime for products with little to no oversight.
Applies best practices to build code based on well-established methods and secure design principles while also applying best practices for new code development and formal validation of security invariants.
Follows best practices for product development and scaling to customer requirements, and applies best practices for meeting scaling needs and performance expectations and security promises.
Builds knowledge, shares new ideas, and shares pinpoints of engineering tool gaps to improve software developer tools to support easier, faster, and more effective software engineering for complex product features.
Identifies whether open source or internal code is available to address coding needs for a set of product features, and reuses it in a responsible manner where applicable.
Develops higher-level awareness of tools outside current areas of expertise.
Helps to identify and/or create tools that are useful for building the product, determining if methods are still applicable for the current solution.
Understands and applies security best practices and establishes code invariants to model "security as code," ensuring each layer is independently secure, and minimizing risk with minimal supervision.
Adopts security standards for clear security code review practices for a set of product features that align with design and engineering principles to raise the security hardening for both protections and detections.
Contributes to incorporating deployment gates on security controls, and scanners for a set of product features to prevent regressions and/or vulnerabilities that would have customer impact.
Includes required security monitoring to ensure detection of violations with minimal guidance.
With minimal supervision, works with relevant security partners to define security promises and security invariants while factoring in attacker/investigator personas for security monitoring and telemetry needs, ensure threat models and premortems validate upstream and downstream assumptions and security invariants, establish security breach drills and security incident response processes (e.g., impact analysis, containment), and ensure that artificial intelligence (AI) safety features are implemented for the AI production systems tied to a set of product features.
Contributes to efforts to ensure the correct processes are followed to achieve a high degree of security, privacy, safety, and accessibility.
Checks for visible evidence (e.g., audit trail) to demonstrate compliance for product areas.
Develops and holds an understanding of the implications of onboarding new technologies following expectations of compliance at Microsoft.
Demonstrates and maintains an up-to-date understanding of both global and local regulations for technologies and system applications to ensure regulations are met.
Works with partner teams to ensure a set of product features work well with the components of the partner team with minimal supervision, contributing to efforts to ensure proper end-to-end testing, live-site coverage, scalability, performance, and DRI escalation pathways are established before going live.
Remains current in skills by investing time and effort into being informed of current developments that will improve the availability, reliability, efficiency, observability, and performance of products while also driving consistency in monitoring and operations at scale.
Conducts learning and literary sessions to raise awareness on relevant engineering design principles (e.g., security, testability, performance, scalability, accessibility, product knowledge) with minimal guidance.
Implement
Reviews work items to deepen knowledge of product features in partnership with appropriate stakeholders (e.g., technical program managers) and executes project plans, release plans, and work items.
Contributes to efforts to break down larger work items into smaller work items and providing estimation.
Escalates issues that might cause a delay.
Ensures required security protections and detection processes are accounted for in planning with minimal guidance.
Contributes to ensuring project plans adhere to security, privacy, and compliance requirements.
Ensures all code for a set of product/solution features is properly flighted for quicker mitigation of production incidents with minimal supervision.
Calculates capacity for planning, accounting for appropriate failover and backup/restore mechanisms for disaster recovery for a set of features with minimal guidance.
Makes considerations for efficient operation of a set of features after it is live with minimal supervision.
Contributes to establishing a rollback plan for a set of features.
Learns about and supports deployment to customers by following the correct measures to push features out to customers.
Follows safe change deployment practices (e.g., ensuring that flights are set correctly) for their team to minimize adverse impact to users and other services with managerial guidance.
Learns about and applies best practices for the deployment of features safely with managerial oversight and/or guidance from more experienced peers.
Contributes to monitoring dependency status and ensuring that only the latest, secure versions are deployed.
Identifies when rollback plans should be enacted for a product feature with direct supervisi