JobsPrincipal Security Research Manager
Job description
The Principal Security Research Manager will lead the MDASH team focused on enhancing vulnerability discovery, validation, and remediation in source code. This role involves shaping the research strategy and measurement for vulnerability detection across various programming languages and frameworks. The ideal candidate will combine expertise in vulnerability research with leadership skills to mentor a team of security researchers. The position emphasizes collaboration with engineering and product teams to translate research findings into actionable improvements for customers.
Requirements
- Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 6+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection OR Bachelor's Degree in the same fields AND 8+ years experience in the relevant areas.
- 3+ years of people management experience.
- Ability to meet Microsoft, customer and/or government security screening requirements.
Responsibilities
- Lead, mentor, and develop a team of security researchers responsible for MDASH vulnerability discovery, validation, fix generation, and quality measurement.
- Define the research and quality roadmap for expanding MDASH coverage across vulnerability classes, programming languages, frameworks, codebase sizes, and real-world development patterns.
- Establish measurable quality goals and decision criteria across recall, precision, consistency, vulnerability validation, fix correctness, and end-to-end resolution.
- Direct the creation and curation of representative evaluation suites and trusted ground truth drawn from various sources.
- Lead systematic analysis of false negatives, false positives, and validation failures to prioritize improvements.
- Partner with various teams to integrate research improvements and connect offline measurements with customer outcomes.
- Communicate technical strategy, evaluation results, risks, and investment priorities to senior leaders and cross-functional partners.
- Model Microsoft values and foster an inclusive environment for researchers.
Benefits
- Employees at Microsoft are often offered comprehensive, “world-class” benefits—including health and mental-wellness programs, competitive pay with bonuses and stock awards, and retirement/savings options. Time-off and flexibility are common, with generous vacation and holidays, parental and caregiver leave, and flexible work schedules, alongside learning support, employee resource groups, product discounts, and matching-gifts/volunteering programs. Specific benefits can vary by region.
Is this posting expired or inaccurate?
