Principal Security Engineering Manager

Microsoft is one of the largest enterprise service companies in the world, and they are seeking a Principal Security Engineering Manager to lead a team focused on building identity protections. This role involves guiding Security Operations Engineers and Technical Program Managers to enhance security outcomes while reducing lateral-movement risks across Microsoft’s infrastructure.

Responsibilities:

• Lead, coach, and grow a U.S.-based team of Security Operations Engineers and TPMs focused on building identity protections that reduce lateral-movement risk across Microsoft’s infrastructure and services
• Define the vision, strategy, and priorities for delivering durable identity protection capabilities that improve security outcomes, operational scale, and business impact
• Build and operationalize a hybrid human + agentic Security Operations Engineering model, applying AI, automation, and workflow innovation to improve protection design, delivery, monitoring, and response
• Foster an engineering-oriented culture that values technical depth, experimentation, continuous improvement, operational excellence, and measurable risk reduction
• Partner across identity engineering, product, security operations, detections, data science, and platform teams to translate protection requirements into scalable controls, operational mechanisms, and product improvements
• Drive clear, actionable protection outputs for technical teams and leadership, including protection roadmaps, risk assessments, operational readiness plans, and executive-level updates
• Establish and maintain engineering standards, quality controls, reliability expectations, and operating mechanisms for identity protection delivery and operations
• Develop trusted relationships across Microsoft security, identity, platform, and infrastructure teams to align requirements, remove execution blockers, and scale protection adoption
• Represent the team in customer, partner, and leadership engagements by explaining identity protection strategy, lateral-movement risk reduction, and SecOps engineering outcomes
• Hire and develop diverse talent, build an inclusive and high-performing team culture, and create an environment where engineers and TPMs can do their best work

Requirements:

• Doctorate in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
• OR Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
• OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 6+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
• OR equivalent experience
• 1+ year(s) people management experience
• Candidates must be able to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter
• Experience in product/service/program management or software development
• 5+ years people management experience
• Proven ability to engage credibly with CISOs, SOC/security-operations teams, identity engineers, platform teams, and security engineers, translating real-world defender needs into identity protection strategy, engineering priorities, and operational roadmaps
• Experience designing, building, and operating identity protections that reduce lateral-movement risk, strengthen privileged-access boundaries, and improve the security of cloud-critical administrative environments
• Sufficient technical fluency in identity architecture, privileged access, lateral-movement risk, protection engineering, and security operations to go deep with engineering and security teams on hard trade-offs, paired with leadership judgment to guide strategy execution and operational scale