Principal Security Engineering Manager - Edge Browser

Microsoft

54d•Onsite

About The Position

The Microsoft Edge Browser Security Team is responsible for securing Edge client code. Our work broadly fits into three distinct categories: Engagement, Proactive, and Reactive security. We work closely with developers, engaging with them to ensure principals such as defence in depth and secure by default are architected into everything we do. Additionally, we perform proactive vulnerability research and analysis at scale to highlight high risk attack surfaces and identify security bugs before hackers do. Finally, we ensure that our reactive response flows are monitored and maintained, tracking reports from external finders, and working with threat intelligence teams to stop active threats to our customers. Throughout all of this, you will work with our industry partners to contribute security improvements to the Chromium project to make the web safer for everyone. As a Principal Security Engineering Manager in Edge Browser, you will lead a team of talented engineers who are focused on browser security. You will be expected to have experience of leading engineering teams, preferably directly in the field of security research. Ideal candidates will have or quickly obtain a technical knowledge of code audit, fuzzer development, crash analysis and web security. Successful candidates will demonstrate the ability to adopt an adversarial mindset, finding creative ways to break assumptions, identify gaps, and bypass security functions. It is highly beneficial to also have a deep understanding of security fundamentals, computer science skills, and a passion for keeping Microsoft’s customers safe. People managers at Microsoft are required to deliver success through empowerment and accountability through our core Manager principles of modelling our culture and our values, coaching your team to achieve objectives and outcomes, and caring to attract and retain great people. Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. Starting January 26, 2026, Microsoft AI (MAI) employees who live within a 50- mile commute of a designated Microsoft office in the U.S. or 25-mile commute of a non-U.S., country-specific location are expected to work from the office at least four days per week. This expectation is subject to local law and may vary by jurisdiction.

Requirements

Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 6+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR equivalent experience.
1+ year(s) people management experience.

Nice To Haves

Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 5+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 8+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 12+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR equivalent experience.
2+ years people management experience.
Experience with relevant security research along with relevant CVEs (if available) ideally in browser vulnerability discovery.
Experience with writing basic exploits for native or web applications.
Development and deployment of fuzz testing and/or static analysis software.

Responsibilities

Provide line management to a team of engineers located in Redmond. Embody Microsoft’s management philosophy of Model, Coach & Care.
Be fully invested helping to develop and grow our engineers.
Be able to help plan and execute strategies for growing Edge’s capabilities. Drive initiatives to identify and mitigate security risk for our customers.
Oversee our security response work, acting on reports from vulnerability researchers.
Monitor and alert the security health of Edge and plan remedial actions.
Collaborate with other security teams across Microsoft to design and develop new security mitigations and defences.
Work closely with our partners in the Chromium community to improve browser security.
Leverage curiosity and learn new skills to operate in a fast-paced and ever-changing environment.
Interact with the external security community, researchers and security conference presenters.
Excel in cross-group and interpersonal skills, with the ability to articulate the business need for security.