As a Principal Security Engineering Manager in the Microsoft AI Infrastructure Information Security team, you will build and lead a team of security engineers responsible for product and platform security. You will own and evolve the secure software development lifecycle (SSDLC), guide architecture and code reviews, expand threat modeling and security testing, and integrate automated guardrails into continuous integration and continuous delivery (CI/CD) pipelines. You will partner with engineering leaders to prioritize risk, establish practical paved paths, and apply AI-assisted security workflows while maintaining the technical depth needed to guide complex design, reliability, and operational decisions.
Locations (3)
Sunnyvale, California, United States
California, United States
New York, United States
Compensation
Security Operations Engineering M5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.
Responsibilities
Build, manage, coach, and develop a high-performing team of security engineers by defining clear objectives, enabling success across boundaries, investing in individual growth, scaling the team's capabilities, and managing performance with care and accountability.
Define and execute the team's product and platform security roadmap, align objectives and key results with company priorities, and deliver measurable improvements in risk reduction, control effectiveness, engineering efficiency, and secure development maturity.
Own and continuously improve the SSDLC by integrating security requirements, architecture and code reviews, threat modeling, static and dynamic analysis, fuzzing, penetration testing, and continuous end-to-end testing throughout the software lifecycle.
Design and drive adoption of paved paths and developer guardrails for secure coding, cryptographic hygiene, dependency management, software supply-chain security, code integrity, and secure CI/CD across on-premises and cloud environments.
Build security tooling, automation, and AI-assisted workflows that improve coverage and technical rigor, surface high-value insights, reduce operational overhead, and prevent recurring classes of vulnerabilities.
Requirements
Doctorate in Statistics, Mathematics, Computer Science
Master's Degree in Statistics, Mathematics, Computer Science
Bachelor's Degree in Statistics, Mathematics, Computer Science
Nice to have: Doctorate in Statistics, Mathematics, Computer Science with 5+ years experience
Nice to have: Master's Degree in Statistics, Mathematics, Computer Science with 8+ years experience
Lead and grow the Cloud Security team, set direction for securing AWS, Kubernetes, and production access, hire senior engineers, and drive security standards and incident response.
Responsibilities
Lead and grow the team. Hire, coach, and set goals for Cloud Security engineers; own delivery against the roadmap
Own cloud security architecture. Set standards for AWS account structure, network segmentation, encryption, and workload isolation across Kubernetes clusters
Run identity and access for production. Drive least privilege across human and machine identities: SSO into AWS, role design, just-in-time access, and secrets management
Ship guardrails as code. Service control policies, admission control, policy-as-code checks in CI, and hardened Terraform modules
Own posture management. Build posture checks in Go and policy-as-code, turn findings into a prioritized queue
