This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Come build community, explore your passions and do your best work at Microsoft with thousands of University interns from every corner of the world. This opportunity will allow you to bring your aspirations, talent, potential—and excitement for the journey ahead. SERPENT (Services Pentest) is looking for a learn-it-all engineer excited to secure Microsoft products and devices through real-world penetration testing, research, and security innovation.
Job Responsibility:
Participate in penetration tests, security reviews, and variant-hunting exercises for Microsoft products and services—including design reviews, code reviews, and exploit proof-of-concept development
Support analysis of emerging threats and contribute to improving the security of next-generation Windows, Azure, and specialized cloud services
Apply a current and evolving understanding of offensive security techniques to propose new protections and reinforce secure design
Engage with internal and external security researchers, contributing to a culture of curiosity and continuous learning
Collaborate with product teams to improve security posture and articulate the business value of security insights
Participate in the SERPENT OODA Loop (Observe → Orient → Decide → Act) to scale offensive insights across Microsoft
Requirements:
Candidate must be enrolled in a full time bachelor's or masters program in an area relevant for the role during the academic term immediately before their internship.
Must have at least one semester or term of school remaining following the completion of the internship
Nice to have:
Familiarity with reading Python or C#
Demonstrated interest in cybersecurity, penetration testing, or vulnerability research
Curiosity, willingness to learn, ability to ask strong technical questions, and passion for solving complex problems
Participation in Capture the Flag (CTF) challenges, security labs, hackathons, or research projects
Coding experience in C#, Java, Python, Rust, Go, or JavaScript/TypeScript
Familiarity with cloud concepts (Azure preferred) or distributed systems
Understanding of static analysis or experience auditing code for vulnerabilities
Knowledge of memory corruption, web security, identity, authentication, or operating system internals