Microsoft Logo

Microsoft

Principal Security Assurance Manager

Reposted 15 Days Ago
Be an Early Applicant
Remote
Hiring Remotely in United States
143K-304K Annually
Expert/Leader
Remote
Hiring Remotely in United States
143K-304K Annually
Expert/Leader
Leads Windows security assurance across compliance, risk assessment, security controls, vulnerability research, and security tooling. Manages security assurance program managers, partners with engineering and product teams, translates requirements into controls, drives scalable security reviews and scanning, and coordinates high-impact initiatives. The role requires influencing across teams, managing ambiguity, tracking outcomes, and improving security processes throughout the product lifecycle.
The summary above was generated by AI
Overview
The Microsoft Windows Security team is responsible for protecting billions of Windows devices by driving platform‑level security, risk reduction, and resilient-by-design engineering across the Windows ecosystem.
 
We are seeking a Principal Security Assurance Manager to lead our end‑to‑end security assurance effort including security compliance, risk assessment, and supporting our vulnerability research and security tooling efforts across Windows. This role sits at the intersection of platform security architecture, threat intelligence, vulnerability discovery, and execution, with broad influence across Windows engineering and other internal and external security assurance and research partners.
 
Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities

Lead a highly functioning team of security assurance PMs, modeling our culture, developing their skills through coaching

Partner with engineering and product teams to ensure security requirements are met at scale, leveraging automation and scalable solutions.

Translate requirements into actionable product requirements and security controls.

Execute and evolve the security assurance process for Windows teams, enabling a scalable, risk-based approach that supports shared responsibility while ensuring consistent security review coverage and compliance.

Lead cross-team security initiatives and coordination focused on deep security engagements, scalable security enforcement, scenario ownership, and integrated scanning solutions.

Collaborate across teams to align priorities, deliverables, and milestones, ensuring security is embedded throughout the product lifecycle.

Influence without authority by building strong partnerships across security engineering and partner teams, ensuring alignment on priorities, risks, and mitigation strategies.

Navigate ambiguity and create clarity for broader organization.

Deliver end-to-end execution on high-impact security efforts, from problem definition through implementation, tracking measurable outcomes and continuously improving processes.

 


Qualifications
Qualifications
    • Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field
      • AND 4+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection
        • OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field 
      • AND 6+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection
      • OR equivalent experience.
    • 1+ year(s) people management.
Preferred Qualifications:
  • Drive security initiatives across groups.
  • 10+ years of experience in ability to create clarity, energy, and cohesion across the team.
  • Ability to influence
  • Demonstrated experience in security research, especially around vulnerability discovery.
  • Experience exploiting bugs and bypassing security mitigations in operating systems.
  • Familiarity with Microsoft Windows architecture. 
#WARP

Security Assurance M5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay


This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.



Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Similar Jobs

17 Minutes Ago
Remote
United States
180K-200K Annually
Expert/Leader
180K-200K Annually
Expert/Leader
Artificial Intelligence • Cloud • Information Technology • Energy • Infrastructure as a Service (IaaS)
Leads Riot’s enterprise Identity and Access Management program across corporate, cloud, data center, and operational environments. Responsibilities include IAM strategy, Microsoft Entra ID architecture, privileged access management, identity governance, least-privilege models, non-human identity controls, third-party access, automation, compliance, security monitoring, metrics, and leadership of IAM engineers and partners.
Top Skills: Cloud PlatformsConditional AccessIdentity Governance And Administration (Iga)Microsoft Entra IdMulti-Factor Authentication (Mfa)Nist CsfPasswordless AuthenticationPrivileged Access Management (Pam)Privileged Identity Management (Pim)Role-Based Access Control (Rbac)SaaSSingle Sign-On (Sso)Zero Trust
17 Minutes Ago
Remote
United States
160K-175K Annually
Senior level
160K-175K Annually
Senior level
Artificial Intelligence • Cloud • Information Technology • Energy • Infrastructure as a Service (IaaS)
Designs, implements, and operates enterprise IAM solutions across Entra ID, Active Directory, cloud, SaaS, and data centers. Manages SSO, MFA, PAM, PIM, RBAC, identity governance, lifecycle controls, provisioning automation, third-party access, and non-human identities. Troubleshoots authentication and federation issues, supports identity-threat investigations, maintains technical documentation, and contributes to audit and compliance activities.
Top Skills: Active DirectoryAPIsConditional AccessCyberarkIdentity Governance And AdministrationIso 27001MfaMicrosoft Entra IdNist CsfOauth 2.0Openid ConnectPimPowershellPrivileged Access ManagementRbacSailpointSAMLScimSoc 2SoxSsoZero Trust
An Hour Ago
Remote or Hybrid
80K-115K Annually
Mid level
80K-115K Annually
Mid level
Artificial Intelligence • Cloud • Payments • Software • Business Intelligence • Generative AI • Automation
Manage onboarding, renewals, integrations, billing reconciliation, performance reporting, documentation, and process improvements for a certified vendor program. Coordinate internal and external stakeholders, track milestones, resolve issues, maintain vendor records, and provide dashboards and recommendations to leadership. The role partners with Finance, Business Operations, Customer Experience, Product, and Engineering to improve vendor lifecycle operations.
Top Skills: AsanaJIRAExcelSaaSSmartsheet

What you need to know about the Colorado Tech Scene

With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.

Key Facts About Colorado Tech

  • Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
  • Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
  • Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
  • Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
  • Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account