Member of Technical Staff - Machine Learning Engineer

About the Team

Copilot Security is at the core of Microsoft's mission to deliver trusted, humancentered AI experiences. We make security and resilience intrinsic to every Copilot interaction-across devices, platforms, and ecosystems. Our work spans secure identity flows, defenses against emerging threats such as prompt injection, and privacyfirst systems that scale globally across Microsoft Copilot surfaces.
As Copilot enters a new era of agentic AI, where systems reason, plan, and act on behalf of users, security can no longer be static or rulesbased. We are building adaptive, learningdriven defenses that bring judgment, context, and "security common sense" directly into model behavior and agentic workflows.

About the Role

We are seeking a Senior Machine Learning Engineer to tackle some of the hardest problems at the intersection of applied ML, AI security, and agentic systems. This is a handson role focused on designing, training, evaluating, and shipping MLpowered defenses that protect Copilot users from threats such as prompt injection, adversarial manipulation, unsafe delegation, and abuse of agentic workflows.
You will work closely with security engineers, applied scientists, and product teams to translate emerging threat patterns into production ML systems-from detection models and policy learners to evaluation frameworks that measure realworld robustness. Your work will directly shape how Copilot reasons safely, applies guardrails, and earns user trust at global scale.

Why This Role Matters

Agentic AI introduces fundamentally new security risks: indirect prompt injection, crosstool privilege escalation, unsafe reasoning chains, and subtle informationflow failures. Your work will help define how AI systems develop and apply security judgment, enabling Copilot to act safely and responsibly while still unlocking powerful new capabilities for hundreds of millions of users worldwide.

Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Starting January 26, 2026, Microsoft AI (MAI) employees who live within a 50- mile commute of a designated Microsoft office in the U.S. or 25-mile commute of a non-U.S., country-specific location are expected to work from the office at least four days per week. This expectation is subject to local law and may vary by jurisdiction.

• Design, train, and deploy MLbased defenses for threats such as prompt injection, adversarial inputs, and abuse of agentic workflows.
• Develop adaptive detection and policy models that learn from evolving attacker behavior rather than relying solely on static rules or signatures.
• Build and own evaluation frameworks for AI security, including adversarial testing, redteaming support, and continuous robustness measurement across real Copilot scenarios.
• Partner with security and engineering teams to integrate ML defenses into secure orchestration frameworks that govern agent delegation, tool calling, and action execution.
• Apply ML to encode security "common sense" and judgment into AI responses, balancing usefulness, safety, and user intent.
• Monitor and analyze telemetry to improve model performance, reduce false positives/negatives, and guide iterative defense improvements.
• Collaborate crossfunctionally with product, privacy, and AI platform teams to land agentic security patterns across Copilot and MAI.
• Document and share applied ML security techniques, helping establish best practices for secure agentic AI across Microsoft.

Required Qualifications:

• Bachelor's Degree in Computer Science or related technical field AND 4+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
  • OR equivalent experience.

Preferred Qualifications:

• Master's Degree in Computer Science or related technical field AND 6+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
  • OR Bachelor's Degree in Computer Science or related technical field AND 8+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
  • OR equivalent experience.
• 4+ years of handson experience building and shipping machine learning systems in production.
• Solid foundation in ML fundamentals, including classification, anomaly detection, representation learning, and model evaluation.
• Proficiency in Python and experience with modern ML frameworks (e.g., PyTorch, JAX, TensorFlow).
• Experience designing endtoend ML pipelines: data collection, training, evaluation, deployment, and monitoring.
• Ability to reason about adversarial behavior, threat models, and failure modes in AI/ML systems.
• Experience working on AI safety, trust, or securityadjacent ML problems, including prompt injection, abuse detection, or adversarial ML.
• Familiarity with agentic or LLMbased systems, including tool calling, multistep reasoning, or orchestration flows.
• Experience building ML evaluation and observability systems for realworld AI behavior (e.g., adversarial testing, redteam loops, robustness metrics).
• Exposure to distributed ML systems, largescale data processing, or model serving in cloud environments.
• Ability to clearly communicate complex ML and security concepts to engineering and nonML stakeholders.

#MicrosoftAI #MAIDPS

Software Engineering IC4 - The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $158,400 - $258,000 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.