This role pays more than
82%
of similar roles. Most pay
$161,200–$215,315
— the shaded band above.
At the midpoint, this role pays about
$231k
versus about
$188k
for comparable roles.
Based on 240 similar postings.
Employer
About Microsoft
Microsoft Corporation is a global technology leader producing software, hardware, and cloud services including Windows, Office 365, Azure cloud platform, Xbox gaming, and Surface devices. Industry: Software & Cloud Computing
Microsoft currently has
686 open roles
on FindRole.
Listed pay typically runs
$119,800–$234,700
across 666 roles with salary data.
The Principal Security Assurance Program Manager joins the Windows Security team to lead end-to-end security assurance efforts, including risk assessment, compliance, vulnerability research, and security tooling across the Windows ecosystem. This role sits at the intersection of platform security architecture, threat intelligence, and vulnerability discovery. You will partner with engineering teams to translate requirements into actionable product controls, develop scalable automation solutions, and manage cross-team initiatives for deep security engagements and integrated scanning. The ideal candidate possesses expertise in the software development lifecycle, threat modeling, anomaly detection, and exploiting bugs or bypassing mitigations in operating systems. You will navigate ambiguity to create clarity while ensuring security is embedded throughout the product lifecycle. Key technical domains include Windows architecture, vulnerability discovery research, and large-scale computing environments to ensure robust protection for billions of devices.
Translate high-level security requirements into actionable product requirements and specific security controls.
Execute and evolve the security assurance process for Windows teams using a risk-based approach.
Ensure security requirements are met at scale by leveraging automation and scalable solutions.
Lead cross-team initiatives focused on deep security engagements, enforcement, and integrated scanning solutions.
Manage end-to-end execution of high-impact security efforts from problem definition through implementation.
Track measurable outcomes and continuously improve internal security processes.
Align priorities, deliverables, and milestones across engineering teams to embed security throughout the product lifecycle.
What we're looking for
A Master's degree in Statistics, Mathematics, Computer Science, or a related field and 6+ years of experience in security.
A Bachelor's degree in Statistics, Mathematics, Computer Science, or a related field and 8+ years of experience in security.
Equivalent experience to the specified educational and experience requirements.
Master's degree in Risk Management or Cyber Security and 4+ years of experience in SDLC, large scale computing, threat modeling, or anomaly detection (preferred).
Bachelor's degree in Risk Management or Cyber Security and 6+ years of experience in SDLC, large scale computing, threat modeling, or anomaly detection (preferred).
10+ years of experience in creating clarity, energy, and cohesion across a team (preferred).
Demonstrated experience in security research, specifically regarding vulnerability discovery (preferred).
Experience exploiting bugs and bypassing security mitigations in operating systems (preferred).
Identity and Access Management
Entra
SIEM
Threat Modeling
Anomaly Detection
Cybersecurity
AI
Automation
Software Development Lifecycle
Data Science
Incident Response
Risk Assessment
Information Technology
Azure
C
C++
Penetration Testing
Offensive Security
Fuzzing
Code Review
Threat Modeling
Anomaly Detection
Linux
Windows
Virtualization
AI-assisted tools
OKRs