Senior Technical Program Manager

Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end to end, simplified solutions. The Microsoft Security organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world.

Does protecting over 1 billion people and making the world a safer place sound exciting? Do you want to help protect customers, communities, and Microsoft from threats to privacy and security? This may be the opportunity for you.

The Microsoft Security Response Center (MSRC) seeks an experienced Senior Technical Program Manager to drive and evolve Microsoft’s company-wide security research incentives and security data sharing partnerships. Your portfolio of programs, including company-wide bug bounty, Patch Tuesday, and threat intelligence sharing build global partnerships, identify new and emerging threats to customers, and deliver actionable security data to improve security for everyone.

As the company accelerates our transformation in a mobile-first, cloud-first world, there has never been a more exciting time to be part of the MSRC. We strive to always serve our customers at the highest-level while being constantly agile and adopting a growth mindset mentality that will transform Microsoft.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.

Responsibilities

• Help shape the strategic direction of Microsoft's security research incentives to drive high-impact external security research and security data sharing to deliver authoritative and actionable security data and empower partners and customers to better manage security risks
• Partner with stakeholders across the company and industry to create, manage, and evolve research incentives and security data sharing programs.
• Develop, monitor, and analyze key performance data to identify and deliver process improvement and automation across all programs.
• Develop and analyze researcher, partners, and customer feedback to identify and deliver improvements in research incentives and security data sharing.

Our team focuses on diversity of all types in candidates for our roles and we strive to hire people with different experiences and perspectives into our team. To that end, we know that no candidate has every desired skill and experience, but it all of us together which make our team strong.

We support the following values:

• Diversity of experience and background
• Growth mindset
• Willingness to take action
• Ability to work independently, but a preference for working as part of a team
• Ability to anticipate challenges and create an action plan
• Strong interpersonal, oral, and written communication skills
• Ability to work effectively in ambiguous situations and respond favorably to change
• Able to achieve cross-company objectives across teams and organizations

Our team collectively has the following:

• Program management excellence in cross-team and cross-company product and process development and delivery
• Content creation and effective communication for executive and cyber security professional audiences
• Working knowledge and/or eagerness to learn security concepts like bug bounty, Coordinated Vulnerability Disclosure (CVD), Common Vulnerabilities and Exposures (CVE), and Common Vulnerability Scoring System (CVSS).

• Other

  • E