Microsoft 365 is one of the largest enterprise services at Microsoft (and the world!), and security and customer trust are key to the success of our business and its continued growth. As our services grows – both in terms of the user base and product complexity – it’s becoming increasingly important for us to anticipate potential threats to our service and the customer data it stores, drive product improvements to mitigate those threats, and effectively handle security incidents that require rapid and effective mitigation.

To that end, the Microsoft 365 Core Security team is looking for a Senior Program Manager to drive our incident response (IR) and penetration testing efforts. In this fast paced, highly visible role you’ll need to stay ahead of both the attacker landscape and the rapid growth of our business. You will develop strategies and products that enable us to help IR capabilities scale with Microsoft 365 service growth, help structure penetration tests that align with top challenges and risks to our business, and drive improvements in M365 services based on your experiences dealing with these attacks and incidents. The work you do in this role will be critical to ensuring that Microsoft 365 can continue to attract users and grow, while controlling risk from an ever-evolving attacker landscape.

Responsibilities

The primary responsibilities for this role will include the following:

• Develop an understanding of IR processes in M365, and manage the business structure for our IR efforts (build and track KPIs, propose and drive improvements to KPIs, exec comms, etc.)
• Build and manage a prioritized roadmap of technical/product work needed to improve our IR efforts as the service grows, working across the product teams to ensure that required technical/product work lands (e.g. telemetry improvements, incident management systems, etc.)
• Work with our penetration testing team and business leaders to ensure that pen testing efforts are aligned with the most critical priorities for the business
• Collaborate with teams throughout the service both during pen tests, and afterwards to ensure that key findings are understood and acted on

Qualifications

You do not need to be a security expert to start in this role (though some security background is desirable!), but come prepared with intellectual curiosity, creativity, and a willingness to adopt an “attacker mindset”. The ideal candidate will have the following qualifications:

• 5+ years of experience in a technical program management role
• Proven ability and willingness to operate and influence teams in an complex, matrixed organization
• Strong communication skills, including ability to drive exec communications
• Strong ability to provide structure to an ambiguous problem space – you will be expected to define KPIs/metrics for your area and get your stakeholders on the same page about that
• Experience with analytical/quantitative tools used for IR – SQL, Kusto, Hadoop, etc.

#REDSC

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances.  We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the Accommodation request form.

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.