Overview
The Cloud & AI organization accelerates Microsoft's mission to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers' heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world.
Are you passionate about offensive security, emerging AI technologies, and solving complex technical problems at scale? Join the Microsoft Red Team (MRT), where we emulate real-world advanced persistent threats to ensure Microsoft, and the customers who depend on us, are prepared to face and respond to even the most determined adversaries.
CyberShield is the MRT program that extends our red team capability beyond Microsoft's own estate to select external customers. Our mandate is to shift red teaming from point-in-time, human-led engagements to a software-driven, continuous model powered by agentic, AI-driven red teaming. CyberShield works across Microsoft's own environment and customer environments spanning cloud, identity, network, endpoint, hardware, and operational security domains.
We are looking for a Principal Technical Program Manager to drive the engineering and operational programs that enable CyberShield. You will partner with red team operators, security engineers, platform teams, and the CyberShield Engagement Lead Program Manager to build infrastructure and capabilities for customer operations, advance AI-driven offensive security, and translate emerging tradecraft into scalable technical solutions. You will own cross-functional technical planning, requirements, dependencies, risks, milestones, and measurable outcomes while ensuring that customer feedback and operational lessons shape engineering priorities. You will drive alignment across MRT, the CISO organization, and other Microsoft stakeholders so that engineering investments translate into impactful offensive capability and measurable security impact.
You will operate at the intersection of offensive security, engineering, AI, customer delivery, and technical program management. You will define and drive complex technical plans, partner with engineers to deliver solutions, manage dependencies and risks, establish measurable objectives and key results, and communicate technical strategy, progress, and outcomes to Microsoft leadership.
Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.
Responsibilities
- Drive complex, cross-functional engineering programs that enable CyberShield red team operations across Microsoft and select external customer environments.
- Partner closely with security engineers, red team operators, and platform engineers to define technical requirements and drive development of infrastructure, tooling, and AI capabilities that scale offensive security operations.
- Partner closely with the CyberShield Engagement Lead Program Manager to align customer needs, engagement execution, and technical delivery.
- Work directly with customers to understand and execute their technical and operational needs, ensure operations are delivered successfully, and drive feedback and lessons learned into actionable improvements.
- Translate novel red team tradecraft and operational requirements into actionable engineering plans, technical designs, milestones, and execution strategies.
- Drive programs that advance agentic, AI-driven red teaming, including capabilities that accelerate reconnaissance, vulnerability discovery, exploitation, and analysis.
- Partner with individual contributor engineers and technical leads to drive complex technical solutions from concept and design through implementation and operational adoption.
- Establish and manage program objectives, key results, success criteria, engineering milestones, and other metrics that measure program execution and security impact.
- Identify technical, operational, customer, and organizational dependencies and risks, and drive cross-team decisions and mitigation plans.
- Partner across MRT, the CISO organization, and other Microsoft engineering and security teams to build alignment, resolve dependencies, and drive shared security outcomes.
- Develop technical program plans, engineering proposals, strategy documents, and executive-level communications; present technical plans, progress, risks, and outcomes to Microsoft leadership.
- Successfully operate in uncertain, complex, and novel environments, bringing structure to ambiguous technical problems and driving teams toward measurable outcomes.
- Embody our Culture and Values
Qualifications
Required/minimum qualifications:
- Bachelor's Degree AND 6+ years experience in engineering, product/technical program management, data analysis, or product development OR equivalent experience. 3+ years of experience managing cross-functional and/or cross-team projects.
Other Requirements:
- - Citizenship & Citizenship Verification: This role will require access to information that is controlled for export under export control regulations, potentially under the U.S. International Traffic in Arms Regulations or Export Administration Regulations, the EU Dual Use Regulation, and/or other export control regulations. As a condition of employment, the successful candidate will be required to provide either proof of their country of citizenship or proof of their U.S. permanent residency or other protected status (e.g., under 8 U.S.C. 1324b(a)(3)) for assessment of eligibility to access the export controlled information. To meet this legal requirement, and as a condition of employment, the successful candidate’s citizenship will be verified with a valid passport. Lawful permanent residents, refugees, and asylees may verify status using other documents, where applicable.
•
- - Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:
- Microsoft Cloud Background Check: This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.
Additional or preferred qualifications
- 6+ years of experience working in security engineering or a closely related technical security field.
- 6+ years of experience driving collaboration across multidisciplinary engineering, security, or technical teams.
- 2+ years of experience working in red teaming, penetration testing, offensive security, or a closely related security domain.
- 2+ years of experience working with complex data and performing analysis to drive technical or program decisions.
- Bachelor's Degree in Computer Science, Engineering, Statistics, or a related technical field.
- Experience defining and driving complex engineering programs involving security infrastructure, offensive security, or cloud environments.
- Experience partnering closely with engineers to develop technical requirements, evaluate designs, manage engineering dependencies, and drive complex technical solutions through delivery.
- Understanding of red team operations, adversary emulation, penetration testing, offensive security tradecraft, or vulnerability research.
- Experience with AI-driven or agentic systems and an understanding of how AI can be applied to automate or scale complex technical workflows.
- Experience working with cloud technologies such as Azure, AWS, or GCP and familiarity with identity, endpoint, network, or application security.
- Experience establishing OKRs, program metrics, and data-driven measures of success and using those measures to inform technical and program decisions.
- Demonstrated ability to produce clear engineering plans, technical strategy documents, executive communications, and presentations for executive leadership.
- Experience influencing and driving alignment across engineering, security, product, and organizational boundaries without relying on direct authority.
- Experience operating successfully in ambiguous environments and turning emerging or poorly defined technical problems into structured programs and executable plans.
- Active U.S. Government TS//SCI clearance with full-scope polygraph is preferred, enabling work with highly sensitive customer environments.
#MSFTSecurity
Technical Program Management IC5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.
