Microsoft Logo

Microsoft

Senior Security Assurance Program Manager and Principal Security Assurance Program Manager

Reposted 3 Days Ago
Be an Early Applicant
Remote
Hiring Remotely in United States
120K-304K Annually
Mid level
Remote
Hiring Remotely in United States
120K-304K Annually
Mid level
Leads end-to-end security assurance for Windows, including compliance, risk assessment, security requirements, threat modeling, vulnerability research, and security tooling. Partners with engineering and product teams to implement scalable controls, coordinate cross-team security initiatives, manage milestones, and drive measurable risk reduction. The role requires influencing without authority, navigating ambiguity, and improving security processes across the Windows product lifecycle.
The summary above was generated by AI
Overview
The Microsoft Windows Security team is responsible for protecting billions of Windows devices by driving platform‑level security, risk reduction, and resilient-by-design engineering across the Windows ecosystem.
 
We are seeking a Security Assurance Program Manager to lead our end‑to‑end security assurance effort including security compliance, risk assessment, and supporting our vulnerability research and security tooling efforts across Windows. This role sits at the intersection of platform security architecture, threat intelligence, vulnerability discovery, and execution, with broad influence across Windows engineering and other internal and external security assurance and research partners.
Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
 

Responsibilities
  • Partner with engineering and product teams to ensure security requirements are met at scale, leveraging automation and scalable solutions.
  • Translate requirements into actionable product requirements and security controls.
  • Execute and evolve the security assurance process for Windows teams, enabling a scalable, risk-based approach that supports shared responsibility while ensuring consistent security review coverage and compliance.
  • Lead cross-team security initiatives and coordination focused on deep security engagements, scalable security enforcement, scenario ownership, and integrated scanning solutions.
  • Collaborate across teams to align priorities, deliverables, and milestones, ensuring security is embedded throughout the product lifecycle.
  • Influence without authority by building strong partnerships across security engineering and partner teams, ensuring alignment on priorities, risks, and mitigation strategies.
  • Navigate ambiguity and create clarity for broader organization.
  • Deliver end-to-end execution on high-impact security efforts, from problem definition through implementation, tracking measurable outcomes and continuously improving processes.

Qualifications

Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 4+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection.

  • OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 6+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection.
  •  
  • OR equivalent experience.
Preferred Qualifications:
  • Drive security initiatives across groups.
  • 10+ years of experience in ability to create clarity, energy, and cohesion across the team.
  • Ability to influence
  • Demonstrated experience in security research, especially around vulnerability discovery.
  • Experience exploiting bugs and bypassing security mitigations in operating systems.
  • Familiarity with Microsoft Windows architecture. 

#WARP


Security Assurance IC4 - The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $160,200 - $261,000 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay

Security Assurance IC5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay


This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.



Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Microsoft Cambridge, Massachusetts, USA Office

255 Main Street, Cambridge, MA 02142, Cambridge, United States, 02142

Similar Jobs

11 Minutes Ago
Remote or Hybrid
Junior
Junior
Big Data • Consumer Web • Fintech • Mobile • Payments • Social Impact • Financial Services
Lead live onboarding, refresher, and product-launch training for internal Operations teams and BPO partners. Deliver QA-driven one-on-one and group coaching, coordinate schedules and completion tracking, collaborate with Product and Compliance, and create LMS courses, microlearning, SCORM content, and upskilling programs using AI-assisted workflows.
Top Skills: AddieAi ToolsArticulate RiseArticulate StorylineLmsScorm
12 Minutes Ago
Easy Apply
Remote or Hybrid
Easy Apply
164K-205K Annually
Senior level
164K-205K Annually
Senior level
Cloud • Information Technology • Security • Software • Cybersecurity
Own the end-to-end lifecycle, strategy, roadmap, and execution of Zscaler’s Data Security products, including Web DLP and Email DLP. Define requirements using market and customer insights, collaborate with engineering and cross-functional teams, support product deployment and sales enablement, and execute go-to-market plans. The role requires cybersecurity product management experience, expertise in DLP and data classification, and technical knowledge of Data Security, Email, Proxy, CASB, DSPM, and AI-based security solutions.
Top Skills: Ai/MlBrowser PluginsCasbCompliance StandardsData ClassificationData Loss PreventionData SecurityDspmEmail DlpEmail SecurityEndpoint AgentsProxySecurity FrameworksWeb Dlp
12 Minutes Ago
Easy Apply
Remote or Hybrid
Location, WV, USA
Easy Apply
144K-205K Annually
Entry level
144K-205K Annually
Entry level
Cloud • Information Technology • Security • Software • Cybersecurity
Leads a customer-facing MDR and threat hunting team, overseeing talent development, operational quality, customer escalations, executive communications, and recurring security engagements. Translates threat intelligence, attack activity, and security outcomes into actionable customer guidance. Establishes deliverable standards, drives continuous improvement, supports complex investigations, and ensures MDR services demonstrate consistent customer value.
Top Skills: Ai/MlEdrMitre Att&CkWeb ProxiesZscaler Zero Trust Exchange

What you need to know about the Boston Tech Scene

Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.

Key Facts About Boston Tech

  • Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
  • Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
  • Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
  • Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account