Senior Security Software Engineer

We are inviting you to join the  Microsoft Device Ecosystem and Platform (MDEP) team where we are building the future of a secure-first platform. We are a world class platform, middleware, apps, and services organization that brings end-to-end experiences to life on a diverse range of products, empowering customers through powerful connections to Windows, M365, and Azure across the devices they use.       We are looking for a Senior Software Security Engineer responsible for securing the Android platform stack through the development of trusted system components, security features, vulnerability remediation, together with managing security reviews and partner interactions.       At Microsoft, we have a vision of enabling everyone and every organization on the planet to achieve more. We work with a growth mindset, innovate to empower others, and collaborate to reach our common goals. We uphold our values of respect, integrity, and accountability every day and foster a culture of inclusion where everyone can thrive at work and beyond.

Design, develop, and maintain AOSP security features, applications, and frameworks using Java, Kotlin, C/C++, and other technologies.   Work across drivers, Tools, Linux Kernel, Trusted application, AOSP Framework, and AOSP services.   Collaborate with other developers, testers, product managers, and security experts to ensure the quality, performance, and security of the AOSP platform and applications.   Research and implement the latest security best practices, standards, and technologies for AOSP development.   Troubleshoot, debug, and fix security issues and vulnerabilities in AOSP applications and systems.   Represent Microsoft MDEP team in various forums with our partners, providing industry-leading technical guidance.   Participate in code reviews to ensure code quality and share knowledge with the team.   Excellent communication skills, with the ability to articulate technical design, implementation , and issues clearly and concisely.   Stay updated on the AOSP operating system updates, security trends, and industry best practices.

Required Qualifications:  BS in Computer Science, Engineering, or equivalent practical experience.    Proven experience in A ndroid software development, including designing and delivering complex platform features and functionalities.   Proven experience in implementing security features at OS level .   Strong C/C++ , Java or Kotlin software design and development skills.    Experience developing Android platform services and framework components, with an emphasis on secure API design, privilege boundaries, and inter-process communication (IPC) security.    Experience with Android Open Source Project (AOSP) security architecture, including application sandboxing, permissions, system services, secure storage, and security-focused platform development.    Knowledge of Android security technologies such as Key Mint, Keystore, device integrity, key attestation, secure provisioning, cryptography, and certificate-based trust models.

Deep understanding of AOSP security technologies, including SELinux , Verified Boot, secure updates, application isolation, and Android security internals.    Experience designing end-to-end security architectures spanning device software, cloud services, device management platforms, and enterprise deployments.    Familiarity with threat model development, security architecture reviews, vulnerability analysis and penetration testing.    Experience with specification-driven development, translating requirements into architecture, implementation plans, validation strategies, and measurable deliverables.    Experience using AI-assisted engineering tools responsibly and effectively while maintaining security, privacy, software quality, and engineering accountability.      Other Requirements: Ability to meet