Jason Geffner

About Jason Geffner

BUILDER / BREAKER / LEADERJason Geffner is an information security professional with an extensive history in application security, risk management, malware analysis, threat intelligence, incident response command, endpoint security, security automation, vendor security management, and security research & development. He has held leadership positions at Fortune 50 companies and bootstrapped several teams for a $104 billion unicorn startup. With experience as an IC, manager of ICs, and manager of managers, he is deeply technical and always balances security requirements with business objectives.

Experience

1. Principal Security Engineer (Senior Director Level)

   Microsoft

   Sep 2025 — Present · Redmond, WA, US

   Defined the SDL Strategy for Microsoft Copilot, with long-term roadmap for advancements in threat modeling, traditional SAST, AI-native SAST, supply-chain security, infrastructure-as-code security, traditional DAST, AI-native DAST, penetration testing, and vulnerability tracking, reporting, and remediation• Invented novel mitigation for cross-domain prompt injection attacks (XPIA) with 100% true-positive rate and 0.4% false-positive rate; developed and deployed a broad-sweeping XPIA mitigation that resolved dozens of externally-reported vulnerabilities in Microsoft Copilot• Brought Microsoft Copilot to DAST compliance by developing technology to automatically generate reverse-proxy-enlightened OpenAPI Specifications for Copilot, integrating its execution into Copilot\'s CI/CD pipeline, and deploying infrastructure to host the output for consumption by a scheduled DAST scanner

Education

• Cornell University

  BS, Computer Science

  2000 — 2004

Skills

• Web Application Security
• Security
• Internet Security
• Information Security
• Penetration Testing
• Security Audits
• Network Forensics
• Assembly
• Application Security
• Malware Analysis
• Reverse Engineering
• Computer Security
• Vulnerability Assessment
• Manufacturing
• Viruses
• Ida
• Network Security
• Cloud Computing
• Operating Systems
• Cryptography
• Security Research
• X86 Assembly