Principal Security Assurance Manager

About the role

Lead a highly functioning team of security assurance PMs, modeling our culture, developing their skills through coaching Partner with engineering and product teams to ensure security requirements are met at scale, leveraging automation and scalable solutions. Translate requirements into actionable product requirements and security controls.

Execute and evolve the security assurance process for Windows teams, enabling a scalable, risk-based approach that supports shared responsibility while ensuring consistent security review coverage and compliance. Lead cross-team security initiatives and coordination focused on deep security engagements, scalable security enforcement, scenario ownership, and integrated scanning solutions.

Collaborate across teams to align priorities, deliverables, and milestones, ensuring security is embedded throughout the product lifecycle. Influence without authority by building strong partnerships across security engineering and partner teams, ensuring alignment on priorities, risks, and mitigation strategies. Navigate ambiguity and create clarity for broader organization.

Deliver end-to-end execution on high-impact security efforts, from problem definition through implementation, tracking measurable outcomes and continuously improving processes. * Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 4+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 6+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection OR equivalent experience.

1+ year(s) people management. Drive security initiatives across groups. 10+ years of experience in ability to create clarity, energy, and cohesion across the team. Ability to influence Demonstrated experience in security research, especially around vulnerability discovery. Experience exploiting bugs and bypassing security mitigations in operating systems.