Senior Technical Program Manager

Microsoft•Redmond, WA

1d•$119,800 - $234,700

About The Position

Microsoft Security is seeking a Senior Security Program Manager to establish and operate the program backbone for a new red team spanning adversarial machine learning, agent security, offensive security, automation, and privacy. The role manages how work enters the team, how findings are triaged and tracked, how release-focused engagements are planned, and how evidence is packaged for engineering teams, leadership, and independent reviewers. The position sits at the center of the team’s operating model and partners with security researchers, applied scientists, engineers, product teams, and governance stakeholders. The successful candidate turns complex adversarial work into clear priorities, accountable remediation, and predictable review outcomes, using strong security judgment, disciplined program execution, and clear communication of technical risk.

Requirements

Bachelor’s degree and 4+ years of experience in engineering, product/technical program management, data analysis, or product development, or equivalent experience.
Experience managing complex technical or security programs across research, engineering, product, and governance stakeholders.
Demonstrated ability to establish operating processes, manage dependencies, and drive high-priority findings or risks to accountable resolution.
Ability to communicate technical risk, severity, trade-offs, and residual uncertainty clearly to technical teams and senior decision-makers.
Experience with AI security, adversarial machine learning, red-team operations, product security, incident response, or vulnerability-management programs.
Experience defining severity frameworks, managing confidential findings, and coordinating remediation across multiple product or engineering organizations.
Experience building metrics, dashboards, executive reviews, and evidence packages for security, compliance, or risk decisions.
Demonstrated ability to build a new technical program, create trusted cross-organizational partnerships, and operate effectively in ambiguous environments.

Nice To Haves

Knowledge of agentic systems, large language models, security evaluation, offensive-security workflows, or AI governance and launch-review processes.

Responsibilities

Design and operate intake, prioritization, and engagement-planning processes for embedded assignments, release-focused pre-gate reviews, and ad hoc requests.
Maintain the findings lifecycle from initial report through severity assessment, ownership, remediation target, adversarial validation, closure, and conversion into durable regression coverage.
Coordinate red-team engagements across model, evaluation, engineering, and product milestones, identifying dependencies and schedule risks early.
Build pre-gate packages containing threat models, attack coverage, findings, fixes, residual risk, and supporting evidence for independent review.
Establish program metrics and operating reviews covering engagement coverage, escape rate, time to verified fix, finding durability, and review efficiency.
Facilitate severity and residual-risk discussions, document decisions, and escalate unresolved issues through the agreed MART, AIRT, RAI, and DSB processes.
Partner with researchers and engineers to ensure findings are reproducible, actionable, and assigned to accountable owners with realistic delivery dates.
Manage relationships and operating agreements with AIRT, the MAI Red Team, product security teams, the AI Offense squad, and other partner organizations.
Develop concise executive reporting that communicates attack coverage, material risk, remediation status, and decisions needed without obscuring technical evidence.
Continuously improve team workflows, tooling requirements, engagement templates, and governance interfaces as MART scales.