below marketmost similar roles pay hereabove market
This role pays more than
74%
of similar roles. Most pay
$155,475–$210,875
— the blue band above.
At the midpoint, this role pays about
$209k
versus about
$183k
for comparable roles.
Based on 240 similar postings.
Employer
About Microsoft
Microsoft Corporation is a global technology leader producing software, hardware, and cloud services including Windows, Office 365, Azure cloud platform, Xbox gaming, and Surface devices. Industry: Software & Cloud Computing
Microsoft currently has
694 open roles
on FindRole.
Listed pay typically runs
$119,800–$234,700
across 651 roles with salary data.
The Principal Security Program Manager - Windows Servicing and Delivery joins the Windows Servicing and Delivery organization to advance Windows security. This role involves leading cross-organizational programs that transform security priorities into durable processes and measurable engineering outcomes. You will partner with technical leaders to translate emerging threats into prioritized investments, improve risk visibility, and scale security work through data, automation, and Artificial Intelligence. Key responsibilities include defining strategies for continuous compliance, vulnerability remediation, and regulatory readiness while managing dependencies and schedules. You will utilize skills in threat modeling, anomaly detection, and the software development lifecycle to improve security reviews and operational efficiency. The work focuses on solving technical problems related to Windows internals, including kernel security, authentication, update mechanisms, firmware, boot processes, TPM, identity, and cryptography.
Define and drive the vision, strategy, and execution of complex Windows security programs.
Translate emerging threats and security requirements into prioritized investments and product requirements.
Lead cross-organizational programs by managing milestones, dependencies, schedules, risks, and issues.
Improve security processes and operating rhythms to strengthen accountability and focus on high-impact risks.
Deliver automation, analytics, dashboards, and AI-enabled workflows to improve risk visibility and operational efficiency.
Communicate program vision, status, risks, and trade-offs to technical and executive audiences.
Drive the adoption of new security policies, processes, and tools through clear and timely communication.
What we're looking for
Bachelor's Degree in a relevant field and 6+ years of experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection.
Master's Degree in a relevant field and 4+ years of experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection.
Equivalent experience to the degree and years of experience requirements.
Ability to pass the Microsoft Cloud background check.
8+ years of product management or equivalent experience shipping enterprise platform or infrastructure products (preferred).
Experience in operating-system, platform, or product security and knowledge of Windows internals (preferred).
Track record of managing critical security incidents or rapid-response situations (preferred).
Experience defining product roadmaps, multi-year technical strategy, or applying generative AI to product workflows (preferred).
C
C++
Windows
Azure
Penetration Testing
Vulnerability Discovery
Security Design Review
Code Review
Automation
OS Security
Computer Science
Agentic Systems
Artificial Intelligence
Cybersecurity
Cloud Services
Distributed Systems
Knowledge Graphs
Release Governance
Incident Management
Service Health Reviews
Software Development
Platform Technologies
Data Science