Technical Program Manager II – Open Source Security Release

Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end to end, simplified solutions. We are looking for a Technical Program Manager II– Open Source Security Release who can help accelerate Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.

Responsibilities

• Lead and manage the security release process with stakeholders across the company to deliver Azure Linux OS Common Vulnerabilities and Exposures (CVE) content, including providing security vulnerability context, mitigations steps, and other data for global security professionals
• Contribute to the monthly Patch Tuesday security updates and other regular and out-of-band security releases.
• Help shape the strategic direction of Microsoft's security release program to deliver authoritative and actionable security update data and empower customers to better manage security risks
• Develop, monitor, and analyze key performance data to identify and deliver security release process improvement and automation
• Develop and analyze customer feedback channels to identify and deliver improvements in security release content and delivery channels for customer audience segments.

• Other

  • Embody our Culture and Values

Qualifications

Required Qualifications

• Bachelor's Degree AND 2+ years experience in engineering, product/technical program management, data analysis, or product development
  • OR equivalent experience.
• 1+ year(s) experience managing cross-functional and/or cross-team projects.

Other Requirements

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to, the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter. 

Preferred Qualifications

• Bachelor's Degree AND 4+ years experience in engineering, product/technical program management, data analysis, or product development OR equivalent experience.
• 4+ years experience managing cross-functional and/or cross-team projects.
• Demonstrated knowledge and experience in Coordinated Vulnerability Disclosure (CVD) and CVE.
• Demonstrated experience in Linux and/or open source vulnerabilities
• Experience creating or analyzing security updates, for example as a as a system, network, IT administrator, developer, or product/program manager.
• Content creation and effective communication for executive and cyber security professional audiences
• Experience developing scalable and repeatable strategic processes and identify creative ways to improve upon existing operations.
• Experience helping, educating, and influencing stakeholders in situations with high levels of ambiguity and tight deadlines.

Technical Program Management IC3 - The typical base