CoreAI is at the forefront of Microsoft’s mission to redefine how software is built and experienced, and the Open-Source Security and Tools team is seeking a software engineer to contribute to the ongoing growth and support of the engineering system powering Microsoft, focusing on open-source, developer productivity, and security.
Requirements
- 6+ months of experience using AI-assisted development tools (e.g., GitHub Copilot, or similar) to enhance productivity and code quality.
- 1+ year of experience with packaging ecosystems (packages, tools, protocols) such as NPM, PyPI, NuGet, Maven.
- 1+ year of experience with software security, including threat modeling, isolation, integrity checking, and certificates.
- 1+ years of experience with RDBMS and/or NoSql databases.
- Coding experience in languages including, but not limited to, C, C++, C-Sharp, Java, JavaScript, or Python
- Understanding of how package managers work, how packages are built and installed in various languages and best practices for OSS development
- Experience with open-source packages and developer productivity
Responsibilities
- Works with appropriate stakeholders to determine user requirements for a set of features.
- Contributes to the identification of dependencies, and the development of design documents for a product area with little oversight.
- Creates and implements code for a product, service, or feature, reusing code as applicable.
- Contributes to efforts to break down larger work items into smaller work items and provides estimation.
- Acts as a Designated Responsible Individual (DRI) working on-call to monitor system/product feature/service for degradation, downtime, or interruptions and gains approval to restore system/product/service for simple problems.
- Remains current in skills by investing time and effort into staying abreast of current developments that will improve the availability, reliability, efficiency, observability, and performance of products while also driving consistency in monitoring and operations at scale.
- Developing scalable distributed services scanning package managers like npm, NuGet and PyPi, collaborating with security teams, integrating new policies and scanners in our system, building a variety of tools that help Microsoft engineers consume and build open-source software that’s secure, supporting customers and the production services.
Other
- Bachelor's Degree in Computer Science or related technical field AND 2+ years technical engineering experience
- Ability to meet Microsoft, customer and/or government security screening requirements
- Travel 0-25%
- Work site: 3 days/week in-office
- Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter
