Drive remediation
Partner with engineering and service owners to turn findings into action through scorecards, governance and escalation. Balance security rigor against the cost and friction it puts on engineering teams.
Run the operating rhythm
Own OKRs, KPIs, executive reviews and exception and risk-acceptance processes, and make sure the data behind them is trustworthy.
Represent the program to leadership
Explain complex technical risk clearly to senior leaders and influence decisions across the company.
Champion AI-first work
Use AI and automation to speed up control authoring, triage and posture insights.
Qualifications
Required/minimum qualifications
Bachelor's Degree AND 6+ years experience in engineering, product/technical program management, data analysis, or product development
OR equivalent experience.
1+ year(s) project or people management experience.
3+ years of experience managing cross-functional and/or cross-team projects.
Other Requirements
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.
Additional or preferred qualifications
Bachelor's Degree AND 12+ years experience engineering, product/technical program management, data analysis, or product development
OR equivalent experience.
4+ years people management experience.
8+ years of experience managing cross-functional and/or cross-team projects.
1+ year(s) of experience reading and/or writing code (e.g., sample documentation, product demos).
Experience leading large, technically complex programs across multiple teams with measurable results.
Hands-on knowledge of public cloud infrastructure (Azure, AWS or GCP) and security posture concepts such as configuration baselines, CSPM, and vulnerability or exposure management.
Foundational understanding of security - core principles, threat modeling, applied cryptography, security protocols, etc.
Experience running CSPM, CNAPP or exposure management programs in a large or multi-tenant enterprise.
Familiarity with CIS Benchmarks, NIST CSF, the Microsoft Cloud Security Benchmark and attack-path-based risk prioritization.
Track record of defining executive-level security metrics and driving remediation across many teams.
Experience applying AI/LLM-based automation to security or engineering workflows.
Technical Program Management M5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.
- Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
- https://careers.microsoft.com/us/en/us-corporate-pay
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.