Senior Security Assurance Program Manager and Principal Security Assurance Program Manager

Microsoft • ,

35d • $119,800 - $304,200

About The Position

The Microsoft Windows Security team protects Windows devices by driving platform-level security, risk reduction, and resilient-by-design engineering across the Windows ecosystem. The Security Assurance Program Manager leads end-to-end security assurance efforts, including security compliance, risk assessment, and support for vulnerability research and security tooling across Windows. The role operates at the intersection of platform security architecture, threat intelligence, vulnerability discovery, and execution, with broad influence across Windows engineering and internal and external security assurance and research partners.

The role partners with engineering and product teams to meet security requirements at scale and leads cross-team initiatives that make security assurance scalable, risk-based, and integrated throughout the product lifecycle. It is listed at Security Assurance IC4 and IC5 levels.

Requirements

• Master's degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or a related field and 4+ years of experience in software development lifecycle, large-scale computing, threat modeling, cyber security, or anomaly detection; or
• Bachelor's degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or a related field and 6+ years of experience in software development lifecycle, large-scale computing, threat modeling, cyber security, or anomaly detection; or equivalent experience.

Nice To Haves

• Experience driving security initiatives across groups.
• 10+ years of experience creating clarity, energy, and cohesion across a team.
• Ability to influence.
• Demonstrated experience in security research, especially vulnerability discovery.
• Experience exploiting bugs and bypassing security mitigations in operating systems.
• Familiarity with Microsoft Windows architecture.

Responsibilities

• Partner with engineering and product teams to ensure security requirements are met at scale, using automation and scalable solutions.
• Translate requirements into actionable product requirements and security controls.
• Execute and evolve the security assurance process for Windows teams, enabling scalable, risk-based shared responsibility while ensuring consistent security review coverage and compliance.
• Lead cross-team security initiatives and coordination focused on deep security engagements, scalable security enforcement, scenario ownership, and integrated scanning solutions.
• Collaborate across teams to align priorities, deliverables, and milestones, embedding security throughout the product lifecycle.
• Build partnerships across security engineering and partner teams to influence priorities, risks, and mitigation strategies without authority.
• Navigate ambiguity and create clarity for the broader organization.
• Deliver high-impact security efforts end to end, from problem definition through implementation, tracking measurable outcomes and continuously improving processes.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior