Microsoft
Senior Security Assurance Program Manager and Principal Security Assurance Program Manager
$120K–$304K
United States · On-site · Principal · Full-time · Posted Sep 22, 2026
- Experience
- 4+ years with a master’s degree, or 6+ years with a bachelor’s degree, in one or more listed experience areas; equivalent experience is also accepted. Preferred: 10+ years creating clarity, energy, and cohesion across a team.
- Education
- Master’s or bachelor’s degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or a related field; or equivalent experience.
About the job
Leads Windows security assurance programs covering compliance, risk assessment, vulnerability research support, and security tooling across engineering teams.
What you'll do
- Partner with engineering and product teams to translate security requirements into product requirements and controls, using automation and scalable solutions.
- Evolve Windows security assurance processes and coordinate cross-team security initiatives, reviews, scanning, and compliance.
- Drive high-impact security efforts from problem definition through implementation, tracking outcomes and improving processes.
What they ask for
- Master’s degree in a listed or related field and 4+ years of relevant experience; or bachelor’s degree in a listed or related field and 6+ years of relevant experience; or equivalent experience.
- Relevant experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection.
Nice to have
- Demonstrated security research experience, especially vulnerability discovery; experience exploiting bugs and bypassing operating-system security mitigations.
- Familiarity with Microsoft Windows architecture; experience driving security initiatives across groups.
Pay
USD $119,800 - $234,700 per year (base salary); USD $160,200 - $261,000 per year (base salary); USD $142,800 - $274,800 per year (base salary); USD $188,000 - $304,200 per year (base salary)
Tools
Microsoft Windows
Model-written summary · the original posting is authoritative