Principal Software Engineer

Microsoft 365 Copilot is a foundational productivity experience powered by large language models, Microsoft Graph, user context, and the web. At the core of Copilot sits the Copilot Agent/BizChat Platform, which designs and operates the core agent runtime and shared platform that powers Copilot experiences consistently across Outlook, Teams, Word, Excel, PowerPoint, and more-safely, reliably, and at M365 scale.

Our team builds a modular, eventdriven platform focused on runtime and orchestration, durable longrunning tasks, realtime and multimodal coordination, platform APIs, and developer experience-designed with reliability, observability, and safe deployment as firstclass principles. Operating at the heart of M365, BizChat Platform sets engineering standards for how Copilot agents are built, deployed, evaluated, and scaled, with robust guardrails that protect customer trust and M365's high availability bar.

We are seeking a Principal Software Engineer to drive security governance, architecture, risk management, and compliance execution for BizChat Platform across MSAI. This role partners deeply with engineering and security leadership to ensure highvisibility security initiatives and audit-driven requirements are translated into crisp plans, unblocked quickly, and delivered with measurable outcomes.

Microsoft's mission is to empower every person and every organization on the planet to achieve more. Asemployees,we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

• Own security execution for the BizChat Platform as a Principal Software Engineer, driving platformlevel security architecture, governance, and delivery across MSAI.
• Run the security champion operating cadence (weekly/biweekly/monthly/quarterly) to intake requirements, track commitments (e.g., SFI/QEI), surface blockers, and report clear status to leadership.
• Translate security, compliance, and audit requirements into engineering plans, milestones, and measurable outcomes; ensure workstreams are executionready and unblock teams as needed.
• Coordinate crossteam security workstreams across MSAI to align scope, ownership, dependencies, and timelines; escalate risks, exceptions, and dependency issues through appropriate leadership channels.
• Own and maintain the MSAI risk registry, ensuring risks are current, wellscoped, mitigations are tracked, and leadership reviews are decisionready.
• Drive compliance and audit readiness for highvisibility initiatives (e.g., regulatory, cloud compliance, certificate and identity changes), providing centralized tracking, evidence readiness, and progress reporting.
• Act as the platform security architect, reviewing and influencing designs to ensure securebydefault patterns, threat model coverage, and consistent security "definition of done."
• Lead critical security response and remediation efforts when required, coordinating analysis, followups, and closure across engineering and leadership stakeholders.

• Bachelor's Degree in Computer Science or related technical field AND 6+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
  • OR equivalent experience.

• Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings: