layiq

/la·yiq/adjective

worthy; deserving; fitting; suitable.

A role, opportunity, or path that merits attention, time, and pursuit.

LAYIQ - Principal Software Engineer at Microsoft, Redmond, WA

Define and drive a multi-team technical strategy for Copilot security. Translate emerging threats and product needs into prioritized engineering investments, architectural decisions, and an executable roadmap with clear ownership and success measures.
Own the end-to-end architecture and hands-on implementation of detection and defense systems for prompt injection, indirect prompt attacks, memory poisoning, data exfiltration, model misuse, and abuse of agentic workflows. Resolve ambiguous problems across AI workflows, tools, orchestration layers, trust boundaries, and platform integrations.
Build reusable security services, classifiers, evaluation frameworks, telemetry pipelines, and risk assessment capabilities. Establish extensible interfaces and integration patterns that enable multiple Copilot teams to adopt durable protections instead of duplicating point solutions.
Define security effectiveness measures and release criteria with partners, including attack coverage, detection quality, false-positive impact, and mitigation effectiveness. Use adversarial evaluations and production telemetry to validate improvements, detect regressions, and balance protection with latency, reliability, cost, and customer experience.
Lead threat modeling and architectural security reviews across team boundaries. Partner with security researchers, Microsoft Research, product teams, and platform organizations to investigate emerging attack techniques, validate defenses, and turn research findings into deployable engineering capabilities.
Remain accountable for production readiness and ongoing operation of security capabilities. Establish observability, safe rollout and rollback approaches, and operational practices; participate in on-call rotations and lead cross-team investigations during complex security events.
Drive root cause analysis and durable remediation after security incidents. Address systemic failure modes through shared platform defenses, regression coverage, and improvements to detection, response, and recovery.
Influence architectural choices and engineering investments without direct authority. Build agreement on technical tradeoffs, dependencies, and adoption plans, and communicate risk, progress, and security outcomes clearly to engineers, product partners, and leadership.
Raise engineering quality through design and code reviews, technical mentorship, and knowledge sharing. Help engineers reason about AI security and distributed systems, grow technical ownership, and apply sound engineering practices while continuing to contribute directly to critical implementations.

Master's Degree in Computer Science or related technical field AND 8+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
OR Bachelor's Degree in Computer Science or related technical field AND 12+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
OR equivalent experience.
5+ years of experience designing, building, and operating production software systems.
Demonstrated ownership of ambiguous technical problems from strategy and architectural design through implementation, production rollout, and sustained operation; experience aligning multiple teams on shared platform capabilities and driving adoption without direct authority.
Experience identifying and mitigating security risks in production, with an understanding of prompt injection, indirect prompt attacks, memory poisoning, data exfiltration, model misuse, and agentic system risks.
Experience building security detection, reputation, anomaly detection, threat intelligence, abuse prevention, or Trust & Safety systems, and using evaluation data and production telemetry to demonstrate measurable improvements in protection and operational quality.
Experience with large language models, AI systems, machine learning infrastructure, or evaluation frameworks; familiarity with AI safety, AI security research, and emerging attack and defense techniques.
Experience leading threat modeling, security reviews, red teaming, adversarial testing, or incident response, and translating findings into durable architectural improvements and reusable defenses.
Ability to communicate complex technical tradeoffs and security risks to engineers, product teams, and leadership; experience mentoring engineers and improving design, code, and operational practices across teams.
Contributions to security tooling, patents, publications, open-source projects, or recognized technical leadership in security-related domains.
Experience identifying and mitigating security risks in production, with an understanding of prompt injection, indirect prompt attacks, memory poisoning, data exfiltration, model misuse, and agentic system risks.
Experience with large language models, AI systems, machine learning infrastructure, or evaluation frameworks; familiarity with AI safety, AI security research, and emerging attack and defense techniques.
Experience leading threat modeling, security reviews, red teaming, adversarial testing, or incident response, and translating findings into durable architectural improvements and reusable defenses.
#AISecurity #Copilot #SecurityEngineering #M365Core

Principal Software Engineer

Employer job description

Responsibilities

Qualifications

Preferred Qualifications:

Equal opportunity and accommodations

About this listing

Listing check

Similar jobs

Similar jobs