Principal Security Research Manager

What you'll do

• Lead and develop a team of security researchers focused on vulnerability discovery, validation, and fix quality.
• Define the research roadmap for expanding coverage across various programming languages, frameworks, and vulnerability classes.
• Establish measurable goals and decision criteria for recall, precision, consistency, and end-to-end resolution.
• Curate representative evaluation suites and trusted ground truth from diverse sources to guide product improvements.
• Analyze false positives, negatives, and incorrect fixes to prioritize improvements in model configurations and analysis methods.
• Partner with engineering and science teams to integrate research findings into the product and establish release gates.
• Communicate technical strategy, risk assessments, and investment priorities to senior leadership and cross-functional partners.

What we're looking for

• A Master's degree and 6+ years of experience in software development, threat modeling, or cyber security is required.
• A Bachelor's degree and 8+ years of experience in software development, threat modeling, or cyber security is required.
• Equivalent experience to the specified degree and years of experience may be accepted.
• At least 3 years of people management experience is required.
• Ability to pass Microsoft background and Microsoft Cloud background checks is required.
• Deep knowledge of vulnerability classes and exploitation patterns such as memory safety, injection, and cryptography is preferred.
• Experience with manual code review, static/dynamic analysis, fuzzing, or exploit development is preferred.
• Experience evaluating AI-assisted security systems, large language model applications, or automated graders is preferred.