The Microsoft Windows Security team is responsible for protecting billions of Windows devices by driving platform-level security, risk reduction, and resilient-by-design engineering across the Windows ecosystem.
We are seeking a Principal Security Assurance Manager to lead our end-to-end security assurance effort including security compliance, risk assessment, and supporting our vulnerability research and security tooling efforts across Windows. This role sits at the intersection of platform security architecture, threat intelligence, vulnerability discovery, and execution, with broad influence across Windows engineering and other internal and external security assurance and research partners.
Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
Responsibilities
Partner with engineering and product teams to ensure security requirements are met at scale, leveraging automation and scalable solutions. Translate requirements into actionable product requirements and security controls.
Execute and evolve the security assurance process for Windows teams, enabling a scalable, risk-based approach that supports shared responsibility while ensuring consistent security review coverage and compliance.
Lead cross-team security initiatives and coordination focused on deep security engagements, scalable security enforcement, scenario ownership, and integrated scanning solutions. Collaborate across teams to align priorities, deliverables, and milestones, ensuring security is embedded throughout the product lifecycle.
Influence without authority by building solid partnerships across security engineering and partner teams, ensuring alignment on priorities, risks, and mitigation strategies. Navigate ambiguity and create clarity for broader organization.
Deliver end-to-end execution on high-impact security efforts, from problem definition through implementation, tracking measurable outcomes and continuously improving processes.
Qualifications
Required Qualifications:
- Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field
- AND 6+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection
- OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field
- AND 8+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection
- OR equivalent experience.
- AND 6+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection
- 3+ years people management.
Preferred Qualifications:
- Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 4+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 6+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection OR equivalent experience.
- Drive security initiatives across groups.
- 10+ years of experience in ability to create clarity, energy, and cohesion across the team.
- Ability to influence.
- Demonstrated experience in security research, especially around vulnerability discovery.
- Experience exploiting bugs and bypassing security mitigations in operating systems.
- Familiarity with Microsoft Windows architecture.
#W+DJOBS
#WARP
Security Assurance M6 - The typical base pay range for this role across the U.S. is USD $165,600 - $296,400 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $220,800 - $331,200 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.
Skills Required
- Master's degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or a related field plus 6 or more years of experience in software development lifecycle, large-scale computing, threat modeling, cybersecurity, or anomaly detection
- Bachelor's degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or a related field plus 8 or more years of experience in software development lifecycle, large-scale computing, threat modeling, cybersecurity, or anomaly detection
- Equivalent experience may substitute for the stated degree and experience requirements
- At least 3 years of people management experience
- Master's degree in a relevant field plus 4 or more years of related experience, or bachelor's degree plus 6 or more years of related experience, or equivalent experience
- Experience driving security initiatives across groups
- 10 or more years of experience creating clarity, energy, and cohesion across teams
- Ability to influence without authority
- Experience in security research, especially vulnerability discovery
- Experience exploiting bugs and bypassing security mitigations in operating systems
- Familiarity with Microsoft Windows architecture
Microsoft Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Microsoft and has not been reviewed or approved by Microsoft.
-
Healthcare Strength — Medical, dental, and vision coverage is described as comprehensive, with U.S. plans covering preventive care at 100% and limiting annual out-of-pocket costs. Mental-health counseling, employee assistance, and wellbeing resources are also emphasized.
-
Parental & Family Support — Parental leave, family-caregiver leave, childcare assistance, and family concierge services are highlighted as core elements. These supports are presented alongside parenting and family-planning resources.
-
Leave & Time Off Breadth — Vacation, holidays, and flexible work schedules are emphasized, with generous time-away policies noted. Leave options extend beyond standard vacation to include caregiver and parental programs.
Microsoft Insights
What We Do
At Microsoft, our mission is to empower every person and every organization on the planet to achieve more. Our mission is grounded in both the world in which we live and the future we strive to create. Today, we live in a mobile-first, cloud-first world, and the transformation we are driving across our businesses is designed to enable Microsoft and our customers to thrive in this world.
