Role at a glance
- Job function
-
Software Engineering & IT Technical Program Management
- Salary
- $142.8K – $304.2K/yr
- Location
- Redmond, Washington, United States
- Work arrangement
- On-site
- Employment
- Full-time
- Experience
- 6+ years experience in engineering, product/technical program management, data analysis, or product development OR equivalent experience.
- Education
- Bachelor's Degree AND 6+ years experience in engineering, product/technical program management, data analysis, or product development OR...
Spotted an issue?
We’ll check it against the original posting.
Role Summary
This role leads the Infrastructure Exposure Management team in Microsoft's CISO organization, which finds and measures security risk in cloud infrastructure and drives its reduction across corporate and production tenants. The role manages a team of program managers and service engineers and owns the cloud security posture management (CSPM) strategy and roadmap.
What You'll Do
- Hire, coach and develop a team of program managers and build an inclusive, accountable team culture.
- Set the vision, roadmap and success metrics for exposure management, including coverage, control definitions, scanner tool portfolio,...
- Lead cross-organization programs such as onboarding new tenants and resource types, near-real-time posture assessment, and combining...
- Partner with engineering and service owners to turn findings into remediation through scorecards, governance and escalation.
- Own OKRs, KPIs, executive reviews, and exception and risk-acceptance processes.
- Explain complex technical risk clearly to senior leaders.
Generated from the employer's posting. Verify important details before applying.
View full postingQualifications
A bachelor's degree or equivalent experience, 6+ years of engineering or program experience, 1+ year of project or people management, and 3+ years managing cross-functional projects.
Required
- Bachelor's Degree AND 6+ years experience in engineering, product/technical program management, data analysis, or product development OR...
- 1+ year(s) project or people management experience
- 3+ years of experience managing cross-functional and/or cross-team projects
- Ability to meet Microsoft, customer and/or government security screening requirements
- Pass the Microsoft Cloud Background Check upon hire/transfer and every two years thereafter
Preferred
- Bachelor's Degree AND 12+ years experience engineering, product/technical program management, data analysis, or product development OR...
- 4+ years people management experience
- 8+ years of experience managing cross-functional and/or cross-team projects
- 1+ year(s) of experience reading and/or writing code
- Experience leading large, technically complex programs across multiple teams with measurable results
- Hands-on knowledge of public cloud infrastructure (Azure, AWS or GCP) and security posture concepts such as configuration baselines,...
- Foundational understanding of security such as core principles, threat modeling, applied cryptography, and security protocols
- Experience running CSPM, CNAPP or exposure management programs in a large or multi-tenant enterprise
Original job description
Content provided by the employer
Original job description
Content provided by the employer
Microsoft runs one of the largest and most complex cloud estates in the world. The Infrastructure Exposure Management (IEM) team in the Microsoft CISO organization finds and measures security risk in Microsoft's cloud infrastructure, then drives the work to reduce it across the company's corporate environment and its many production tenants.
We're looking for a Principal Technical Program Manager to lead the team that drives this work. You will have a team of program managers and service engineers and own the strategy and roadmap for cloud security posture management (CSPM) at Microsoft. You will work with engineering, security, Azure and M365 service teams to make sure exposure findings lead to real, measurable risk reduction.
Responsibilities
- Lead and grow the team:
Hire, coach and develop a high-performing team of program managers, and build an inclusive, accountable team culture. - Own the CSPM strategy:
Set the vision, roadmap and success metrics for exposure management across corporate and production tenants. That includes coverage, control definitions, portfolio of scanner tools, how findings are prioritized, and posture reporting. - Drive large programs across many teams:
Lead efforts that span several organizations, such as onboarding new tenants and resource types, near-real-time posture assessment, and bringing several security signals together into one prioritized view. Work with Microsoft Security product teams to drive enterprise security requirements into product capabilities. - Drive remediation:
Partner with engineering and service owners to turn findings into action through scorecards, governance and escalation. Balance security rigor against the cost and friction it puts on engineering teams. - Run the operating rhythm:
Own OKRs, KPIs, executive reviews and exception and risk-acceptance processes, and make sure the data behind them is trustworthy. - Represent the program to leadership:
Explain complex technical risk clearly to senior leaders and influence decisions across the company. - Champion AI-first work:
Use AI and automation to speed up control authoring, triage and posture insights.
Qualifications
Required/minimum qualifications
- Bachelor's Degree AND 6+ years experience in engineering, product/technical program management, data analysis, or product development
- OR equivalent experience.
- 1+ year(s) project or people management experience.
- 3+ years of experience managing cross-functional and/or cross-team projects.
- Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.
Additional or preferred qualifications
- Bachelor's Degree AND 12+ years experience engineering, product/technical program management, data analysis, or product development
- OR equivalent experience.
- 4+ years people management experience.
- 8+ years of experience managing cross-functional and/or cross-team projects.
- 1+ year(s) of experience reading and/or writing code (e.g., sample documentation, product demos).
- Experience leading large, technically complex programs across multiple teams with measurable results.
- Hands-on knowledge of public cloud infrastructure (Azure, AWS or GCP) and security posture concepts such as configuration baselines, CSPM, and vulnerability or exposure management.
- Foundational understanding of security - core principles, threat modeling, applied cryptography, security protocols, etc.
- Experience running CSPM, CNAPP or exposure management programs in a large or multi-tenant enterprise.
- Familiarity with CIS Benchmarks, NIST CSF, the Microsoft Cloud Security Benchmark and attack-path-based risk prioritization.
- Track record of defining executive-level security metrics and driving remediation across many teams.
- Experience applying AI/LLM-based automation to security or engineering workflows.
Technical Program Management M5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.
About the company
Microsoft
Large Enterprise
Microsoft is a global technology leader that empowers individuals and organizations to achieve more through innovative software, services, and devices. Founded in 1975, the company is best known for its flagship products like the Windows operating system and Microsoft Office suite. In addition to personal computing, Microsoft is a leader in cloud computing with its Azure platform, providing a range of solutions for businesses to enhance productivity and efficiency. With a strong commitment to sustainability and accessibility, Microsoft continues to drive technological advancements that shape the future of work and learning.