Microsoft Logo

Microsoft

Senior Security Assurance Program Manager and Principal Security Assurance Program Manager

Reposted 10 Days Ago
Be an Early Applicant
Remote
Hiring Remotely in United States
120K-304K Annually
Mid level
Remote
Hiring Remotely in United States
120K-304K Annually
Mid level
Leads end-to-end security assurance for Windows, including compliance, risk assessment, security requirements, threat modeling, vulnerability research, and security tooling. Partners with engineering and product teams to implement scalable controls, coordinate cross-team security initiatives, manage milestones, and drive measurable risk reduction. The role requires influencing without authority, navigating ambiguity, and improving security processes across the Windows product lifecycle.
The summary above was generated by AI
Overview
The Microsoft Windows Security team is responsible for protecting billions of Windows devices by driving platform‑level security, risk reduction, and resilient-by-design engineering across the Windows ecosystem.
 
We are seeking a Security Assurance Program Manager to lead our end‑to‑end security assurance effort including security compliance, risk assessment, and supporting our vulnerability research and security tooling efforts across Windows. This role sits at the intersection of platform security architecture, threat intelligence, vulnerability discovery, and execution, with broad influence across Windows engineering and other internal and external security assurance and research partners.
Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
 

Responsibilities
  • Partner with engineering and product teams to ensure security requirements are met at scale, leveraging automation and scalable solutions.
  • Translate requirements into actionable product requirements and security controls.
  • Execute and evolve the security assurance process for Windows teams, enabling a scalable, risk-based approach that supports shared responsibility while ensuring consistent security review coverage and compliance.
  • Lead cross-team security initiatives and coordination focused on deep security engagements, scalable security enforcement, scenario ownership, and integrated scanning solutions.
  • Collaborate across teams to align priorities, deliverables, and milestones, ensuring security is embedded throughout the product lifecycle.
  • Influence without authority by building strong partnerships across security engineering and partner teams, ensuring alignment on priorities, risks, and mitigation strategies.
  • Navigate ambiguity and create clarity for broader organization.
  • Deliver end-to-end execution on high-impact security efforts, from problem definition through implementation, tracking measurable outcomes and continuously improving processes.

Qualifications

Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 4+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection.

  • OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 6+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection.
  •  
  • OR equivalent experience.
Preferred Qualifications:
  • Drive security initiatives across groups.
  • 10+ years of experience in ability to create clarity, energy, and cohesion across the team.
  • Ability to influence
  • Demonstrated experience in security research, especially around vulnerability discovery.
  • Experience exploiting bugs and bypassing security mitigations in operating systems.
  • Familiarity with Microsoft Windows architecture. 

#WARP


Security Assurance IC4 - The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $160,200 - $261,000 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay

Security Assurance IC5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay


This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.



Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Microsoft Mountain View, California, USA Office

1065 La Avenida, Mountain View, CA 94043, Mountain View, United States, 94043

Microsoft Palo Alto, California, USA Office

Palo Alto, United States

Microsoft San Francisco, California, USA Office

835 Market Street, Suite 700, San Francisco, CA 94103, San Francisco, United States, 94103

Microsoft San Jose, California, USA Office

San Jose, United States

Microsoft Sunnyvale, California, USA Office

Sunnyvale, United States

Similar Jobs

2 Minutes Ago
Remote or Hybrid
187K-237K Annually
Senior level
187K-237K Annually
Senior level
eCommerce • Information Technology • Retail • Software
Own Mirakl’s relationships with global systems integrators and consultancies, driving partner-sourced pipeline and revenue. Build SI and consulting go-to-market programs, including enablement, referrals, co-selling, joint marketing, and measurement frameworks. Collaborate closely with Sales, Marketing, and leadership to align partner strategy and execution. The role requires enterprise SaaS, e-commerce, or retail technology experience, named global partner relationships, and a proven record of measurable pipeline contribution.
Top Skills: E-CommerceEnterprise MarketplacesOrder Management Systems (Oms)SaaSSupply Chain Technology
2 Minutes Ago
Remote or Hybrid
Junior
Junior
eCommerce • Information Technology • Retail • Software
Build prospect pipelines by researching enterprise businesses, identifying decision-makers, crafting targeted messaging, and generating engagement. Partner with Enterprise Account Executives on opportunity prioritization and prospecting strategies. Share outbound best practices, use AI to improve efficiency and commercial insight, and develop foundational skills for progression into sales or other departments.
Top Skills: OutreachSales NavigatorSalesforce
2 Minutes Ago
Remote or Hybrid
US
160K-180K Annually
Senior level
160K-180K Annually
Senior level
Cloud • eCommerce • Information Technology • Professional Services • Software
Own Cleo’s application and product security program across SaaS and customer-hosted products. Lead SSDLC practices, threat modeling, security tooling, vulnerability management, penetration testing, coordinated disclosure, CVE publication, and NIST CSF controls. Define product security standards, roadmap, secure defaults, access controls, and customer-facing advisories. Partner with engineering, product, architecture, and customers while guiding security engineers and consultants. Also establish protections for LLM applications, AI agents, and AI-assisted development workflows.
Top Skills: Artifact SigningAWSBurp SuiteCi/CdContainer ScanningCveCyclonedxEksGitGithub Advanced SecurityGoIac ScanningJavaJenkinsKubernetesNist Ai Risk Management FrameworkNist Csf 2.0Nist SsdfOwasp AsvsOwasp SammOwasp Top 10 For Llm ApplicationsPolicy-As-CodePythonRbacSAMLSastSbomScaSecrets ScanningSemgrepSlsaSnykSpdxSsoTerraformTypescriptVex

What you need to know about the San Francisco Tech Scene

San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.

Key Facts About San Francisco Tech

  • Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Google, Apple, Salesforce, Meta
  • Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
  • Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
  • Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account