Senior Security Software Engineer

Overview

We are inviting you to join the Microsoft Device Ecosystem and Platform (MDEP) team where we are building the future of a secure-first platform. We are a world class platform, middleware, apps, and services organization that brings end-to-end experiences to life on a diverse range of products, empowering customers through powerful connections to Windows, M365, and Azure across the devices they use.

We are looking for a Senior Software Security Engineer responsible for securing the Android platform stack through the development of trusted system components, security features, vulnerability remediation, together with managing security reviews and partner interactions.

At Microsoft, we have a vision of enabling everyone and every organization on the planet to achieve more. We work with a growth mindset, innovate to empower others, and collaborate to reach our common goals. We uphold our values of respect, integrity, and accountability every day and foster a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities

• Design, develop, and maintain AOSP security features, applications, and frameworks using Java, Kotlin, C/C++, and other technologies.

• Work across drivers, Tools, Linux Kernel, Trusted application, AOSP Framework, and AOSP services.

• Collaborate with other developers, testers, product managers, and security experts to ensure the quality, performance, and security of the AOSP platform and applications.

• Research and implement the latest security best practices, standards, and technologies for AOSP development.

• Troubleshoot, debug, and fix security issues and vulnerabilities in AOSP applications and systems.

• Represent Microsoft MDEP team in various forums with our partners, providing industry-leading technical guidance.

• Participate in code reviews to ensure code quality and share knowledge with the team.

• Excellent communication skills, with the ability to articulate technical design, implementation, and issues clearly and concisely.

• Stay updated on the AOSP operating system updates, security trends, and industry best practices.

Qualifications

Required Qualifications:

• BS in Computer Science, Engineering, or equivalent practical experience.

• Proven experience in Android software development, including designing and delivering complex platform features and functionalities.

• Proven experience in implementing security features at OS level.

• Strong C/C++, Java or Kotlin software design and development skills.

• Experience developing Android platform services and framework components, with an emphasis on secure API design, privilege boundaries, and inter-process communication (IPC) security.

• Experience with Android Open Source Project (AOSP) security architecture, including application sandboxing, permissions, system services, secure storage, and security-focused platform development.

• Knowledge of Android security technologies such as Key Mint, Keystore, device integrity, key attestation, secure provisioning, cryptography, and certificate-based trust models.

Preferred Qualifications:

• Deep understanding of AOSP security technologies, including SELinux, Verified Boot, secure updates, application isolation, and Android security internals.

• Experience designing end-to-end security architectures spanning device software, cloud services, device management platforms, and enterprise deployments.

• Familiarity with threat model development, security architecture reviews, vulnerability analysis and penetration testing.

• Experience with specification-driven development, translating requirements into architecture, implementation plans, validation strategies, and measurable deliverables.

• Experience using AI-assisted engineering tools responsibly and effectively while maintaining security, privacy, software quality, and engineering accountability.

Other Requirements:

• Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:
  • Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud Background Check upon hire/transfer and every two years thereafter.

#W+DJOBS #MDEP #MicrosoftCareers #Hiring

Software Engineering IC4 - The typical base pay range for this role across Romania is lei 263,600.00 - lei 434,000.00 per year. Certain roles may be eligible for benefits and other compensation.

Find additional benefits and pay information here:
https://careers.microsoft.com/v2/global/en/corporate-pay/romania-corporate-pay.html

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

---

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.