Principal Product Manager

Do you want to help organizations secure the way modern software is built, delivered, and operated 

Modern software development has fundamentally changed. Open-source dependencies, AI-assisted development, cloud-native architectures, automated build pipelines, and software supply chains now span thousands of developers, systems, repositories, and services. While these innovations dramatically increase productivity, they also create new attack surfaces that organizations struggle to understand and secure. 

We are building the next generation of Microsoft Defender capabilities that protect the entire software development lifecycle, from source code and dependencies through build systems, development environments, AI-assisted workflows, deployment pipelines, runtime environments, and incident response. 

As a Principal Product Manager, you will help define product strategy, customer scenarios, roadmap investments, and platform direction for Microsofts software supply chain protection portfolio. You will work across Microsoft Defender, GitHub, Azure, security research teams, engineering organizations, and customers to turn emerging security challenges into category-defining products. 

This is a highly strategic and deeply technical product role. Success requires strong product instincts, the ability to influence across organizational boundaries, and a passion for solving complex security problems at industry scale. 

Responsibilities

• Shape product strategy and roadmap priorities for Microsoft Defender’s software development life cycle capabilities. 
• Develop a deep understanding of customer needs, market shifts, and emerging threats, and translate that insight into clear product direction. 
• Partner across Microsoft Defender, GitHub, Azure, Windows, AI, and security research teams to align strategy and execution. 
• Define differentiated product experiences that help customers secure code, dependencies, build systems, developer environments, AI-assisted workflows, and deployment pipelines. 
• Represent Microsoft with customers, executives, and industry audiences as a credible voice on secure software development and supply chain security. 

Qualifications

Required Qualifications 

1. • Bachelors Degree in Computer Science, Engineering, Cybersecurity, or related technical field AND 8+ years of experience in product management, program management, software engineering, security engineering, or related disciplines. 
   • Experience defining and delivering products or platforms in cybersecurity, developer tools, cloud services, or enterprise software. 
   • Demonstrated ability to lead complex initiatives across multiple teams without direct authority. 
   • Experience translating technical concepts into customer value and business outcomes. 
   • Written, verbal, and executive communication skills. 

Preferred Qualifications 

1. • Deep experience in software supply chain security, application security, DevSecOps, open-source ecosystems, or developer platform security. 
   • Strong working knowledge of source control, CI/CD pipelines, package management, build systems, SBOMs, and secure development lifecycle practices. 
   • Experience applying threat intelligence, security operations, or incident response insights to developer and software security scenarios. 
   • Familiarity with AI-assisted software development and the security implications of generated code, agents, models, and development workflows. 
   • Relevant security certifications such as CISSP or CSSLP. 

Product Management IC5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.