I work at Microsoft on the .NET Framework. Previously I was on hardware + device security and ASP.NET security.