Principal Security Engineering Manager

The Cloud & AI organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world. Microsoft is one of the largest enterprise service companies in the world.

Production cloud environments are the control plane for Microsoft’s most critical workloads - changes and security posture in these environments can have broad impact on service continuity and trust. The Principal Security Engineering Manager role leads a team responsible for improving the security posture of production tenant environments through strong operational governance, risk reduction programs, and platform investments that make the safe path the default. You will build a disciplined execution engine across partner teams, drive measurable improvements in isolation and application hygiene, and strengthen incident readiness and compliance-driven cloud buildouts.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
 

In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.

• Lead a team that operates and improves production tenant security, driving consistent execution, governance, and hygiene across critical environments.
• Own end-to-end security risk program mechanics: intake → triage → prioritization → burn-down, with clear ownership, milestones, and measurable outcomes.
• Drive platform and operational improvements that reduce recurring misconfigurations, long-lived exceptions, and manual enforcement in production environments.
• Partner with engineering and security teams to strengthen isolation boundaries, reduce attack paths, and maintain durable security controls over time.
• Build and run incident readiness mechanisms (playbooks, coordination, post-incident follow-ups) to improve response effectiveness and reduce repeat issues.
• Develop and coach a high-performing team with a strong planning and execution culture, balancing partner needs with intentional prioritization.

Required Qualifications:

• Doctorate in Statistics, Mathematics, Computer Science, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
  • OR Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
  • OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 6+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response
    • OR equivalent experience. 
• 1+ year(s) people management experience.

Preferred Qualifications:

• Deep technical knowledge of identity and access management (authN/authZ, RBAC/ABAC concepts, least privilege, cre