Microsoft's Core AI and 1ES (One Engineering System) teams are looking to enhance the security and developer experience of open-source software used and contributed by Microsoft. The Open-Source Security and Tools team specifically needs a senior software engineer to build and support systems that scan package managers, integrate security policies, and provide tools for secure open-source software consumption and development.
Requirements
- coding in languages including, but not limited to, C, C++, C-Sharp, Java, JavaScript, or Python
- 2+ years of experience with distributed systems/Cloud services etc.
- 1+ year of experience with packaging ecosystems (packages, tools, protocols) such as NPM, PyPI, NuGet, Maven.
- 2+ year of experience with software security, including threat modeling, isolation, integrity checking, and certificates.
- 2+ years of experience with RDBMS and/or NoSql databases.
Responsibilities
- developing scalable distributed services scanning package managers like npm, NuGet and PyPi,
- collaborating with security teams, integrating new policies and scanners in our system,
- building a variety of tools that help Microsoft engineers consume and build open-source software that’s secure,
- supporting customers and the production services.
- Creates, implements, optimizes, debugs, refactors, and reuses code to establish and improve performance and maintainability, effectiveness, and return on investment (ROI).
- Acts as a Designated Responsible Individual (DRI) and guides other engineers by developing and following the playbook, working on call to monitor system/product/service for degradation, downtime, or interruptions, alerting stakeholders about status and initiates actions to restore system/product/service for simple and complex problems when appropriate.
- Proactively seeks new knowledge and adapts to new trends, technical solutions, and patterns that will improve the availability, reliability, efficiency, observability, and performance of products while also driving consistency in monitoring and operations at scale.
Other
- 3 days / week in-office
- Ability to meet Microsoft, customer and/or government security screening requirements are required for this role.
- Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud Background Check upon hire/transfer and every two years thereafter.
- Collaborates with appropriate stakeholders to determine user requirements for a scenario.
- Drives identification of dependencies and the development of design documents for a product, application, service, or platform.
