[Hiring] Principal Security Research Manager @Microsoft

Role Description

The MDASH team is advancing how organizations discover and resolve vulnerabilities in source code. We are seeking a Principal Security Research Manager to lead the team responsible for the security research and evaluation that advance MDASH's vulnerability discovery, validation, and remediation capabilities.

• Lead, mentor, and develop a team of security researchers responsible for MDASH vulnerability discovery, validation, fix generation, and quality measurement.
• Define the research and quality roadmap for expanding MDASH coverage across vulnerability classes, programming languages, frameworks, codebase sizes, and real-world development patterns.
• Establish measurable quality goals and decision criteria across recall, precision, consistency, vulnerability validation, fix correctness, and end-to-end resolution.
• Direct the creation and curation of representative evaluation suites and trusted ground truth drawn from purpose-built vulnerable code, public benchmarks, open-source projects, internal codebases, and production feedback.
• Lead systematic analysis of false negatives, false positives, inconsistent detections, validation failures, and ineffective or incorrect fixes.
• Partner with MDASH engine, evaluation infrastructure, model, applied science, and product teams to integrate research improvements.
• Communicate technical strategy, evaluation results, risks, and investment priorities to senior leaders and cross-functional partners.
• Model Microsoft values and foster an inclusive environment in which researchers can do their best work.

Qualifications

• Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 6+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection OR Bachelor's Degree in the same fields AND 8+ years experience OR equivalent experience.
• 3+ years people management.

Requirements

• Ability to meet Microsoft, customer and/or government security screening requirements.
• This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Benefits

• The typical base pay range for this role across the U.S. is USD $165,600 - $296,400 per year.
• In the San Francisco Bay area and New York City metropolitan area, the base pay range is USD $220,800 - $331,200 per year.
• Certain roles may be eligible for benefits and other compensation.