Principal Security Program Manager

Overview

Microsoft's Specialized Cloud (MSC) team is looking for a Principal Security Program Manager to join our Microsoft Offensive Research & Security Engineering (MORSE) team. MORSE is responsible for helping secure the Azure operating system platforms, including the specialized cloud platforms that power critical Azure environments around the world.

The team conducts security architecture and design reviews, performs code reviews, develops security mitigations and tooling, and drives security requirements and best practices across our platforms. Our mission is to help ensure Azure meets the highest possible security standards by identifying risks, challenging assumptions, and partnering with engineering teams to build security into our platforms from the ground up.

In this high-impact role, you will partner closely with engineering and program management teams across MSC and the broader organization to strengthen the security of the platforms and operating systems that underpin Azure.The ideal candidate brings experience with native code (C/C++), a strong understanding of cloud platform architecture, from virtualization through guest virtual machines, and hands-on experience with penetration testing and offensive security techniques, including code auditing, fuzzing, and finding creative ways to challenge security assumptions. You should have a solid understanding of operating system security fundamentals across Windows and/or Linux, strong computer science fundamentals, and a passion for protecting Microsoft customers.We are also looking for someone who is curious and adaptable, including a willingness to leverage AI-assisted tools and techniques to complement and amplify their security expertise.

Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond

Responsibilities

• Identify and mitigate risk in Microsoft platforms in close partnership with MORSE engineers including design reviews, code reviews, and fuzzing
• Be the security contact for teams building new innovative products and technologies in the next version of Azure and specialized clouds.
• Leverage a broad and current understanding of security to envision new protections
• Interact with the external security community and security researchers
• Collaborate with product teams to improve security, and articulate the business value of security investments
• Define objectives and key results (OKRs) to measure product success and track progress against goals, iterating and optimizing as necessary.
• Embody our Culture & Values

Qualifications

Required Qualifications:

• Masters Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 4+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection OR Bachelors Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 6+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection
• OR equivalent experience.

Other Requirements:

• Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:
• Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud Background Check upon hire/transfer and every two years thereafter.

Preferred Qualifications:

• Masters Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, OR related field OR 8+ years experience in software development lifecycle, large scale computing, modeling, cyber security, anomaly detection OR equivalent experience.
• 2+ years in technical program management or product management

Security Assurance IC5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:

https://careers.microsoft.com/us/en/us-corporate-pay

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.